GitHub stars · StarDay

1caddyserver / caddyCross-platform web server supporting HTTP versions 1–3 and automatic HTTPS.GoApache-2.0 · Permissive78,851

2acmesh-official / acme.shA pure Unix shell script ACME client for SSL / TLS certificate automationShellGPL-3.0 · Share derivative source47,925

3certbot / certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.PythonLicense not declared33,308

4Infisical / infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.TypeScriptLicense not declared30,316

5mailcow / mailcow-dockerizedA Docker-based email and groupware suite combining mail delivery and retrieval, spam filtering, webmail, and domain and mailbox administration.PHPGPL-3.0 · Share derivative source13,756

6yonggekkk / sing-box-ygSing-box five-in-one protocol VPS dedicated script: three exclusive functions! Self-signed/acme dual certificate switching, Argo fixed temporary dual tunnel (can coexist), Psiphon VPN (30 countries) offloading function, local IP subscription generationShellGPL-3.0 · Share derivative source10,961

7go-acme / legoLet's Encrypt/ACME client and library written in GoGoMIT · Permissive10,009

8certimate-go / certimateAn open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually.GoMIT · Permissive9,421

9smallstep / certificates🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.GoApache-2.0 · Permissive9,044

10gdy666 / luckySoftware and hard routing public network artifact, ipv6/ipv4 port forwarding, reverse proxy, DDNS, WOL, ipv4 stun intranet penetration, cron, acme, rclone, ftp, webdav, filebrowserGoMIT · Permissive8,347

11nginx-proxy / acme-companionAutomated ACME SSL certificate generation for nginx-proxyShellMIT · Permissive7,729

12dehydrated-io / dehydratedACME client implemented as a simple shell-script – just add waterShellMIT · PermissiveInactive6,267

13win-acme / win-acmeAutomate SSL/TLS certificates on Windows with easeC#Apache-2.0 · Permissive5,833

14letsencrypt / boulderAn ACME-based certificate authority, written in Go.GoMPL-2.0 · Share derivative source5,780

15caddyserver / certmagicAutomatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewalGoApache-2.0 · Permissive5,616

16jinwyp / one_click_scriptinstall latest or LTS linux kernel and enable BBR or BBR plusShellMIT · Permissive5,134

17certd / certdOpen source SSL certificate management tool; fully automatic certificate application, update, and renewal; wildcard certificate, pan-domain name certificate application; automatic deployment of certificates to Alibaba Cloud, Tencent Cloud, host, Synology, and Pagoda; https certificate, pfx certificate, der certificate, TLS certificate, nginx certificate automatic renewal and automatic deploymentJavaScriptAGPL-3.0 · Share derivative source5,117

18allinssl / allinsslAllinSSL is a full-stack SSL certificate lifecycle management tool that integrates certificate application, management, deployment, and monitoring.TypeScriptAGPL-3.0 · Share derivative source3,624