GitHub stars · StarDay

1certbot / certbotCertbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.PythonLicense not declared33,308

2gravitational / teleportThe easiest, and most secure way to access and protect all of your infrastructure.GoAGPL-3.0 · Share derivative source21,073

3cert-manager / cert-managerAutomatically provision and manage TLS certificates in KubernetesGoApache-2.0 · Permissive14,150

4go-acme / legoLet's Encrypt/ACME client and library written in GoGoMIT · Permissive10,009

5certimate-go / certimateAn open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually.GoMIT · Permissive9,421

6dehydrated-io / dehydratedACME client implemented as a simple shell-script – just add waterShellMIT · Permissive6,267

7PanXProject / awesome-certificatesCurated list of 20,000+ hours and 200+ free courses with certificates in IT, CS, Design and Business.CC0-1.0 · Permissive5,946

8digitalbazaar / forgeA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webappsJavaScriptLicense not declared5,350

9novnc / websockifyWebsockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service.PythonLGPL-3.0 · Share derivative source4,487

10smallstep / cli🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.GoApache-2.0 · Permissive4,366

11kjur / jsrsasignCAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.HTMLLicense not declared3,369

12PeculiarVentures / PKI.jsPKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.TypeScriptLicense not declared1,404

13briansmith / webpkiWebPKI X.509 Certificate Validation in RustRustLicense not declared483

14c410-f3r / wtxWritten by humans. WTX is a collection of different transport implementations and related tools focused primarily on web technologies.RustMPL-2.0 · Share derivative source405