Certificate inventory
Lifecycle, expiry, renew & revoke
Issue a certificate
Let's Encrypt via ACME. Wildcards require DNS-01.
Staging is selected by default so you can test without hitting Let's Encrypt production rate limits (50 certs / registered domain / week).
Audit log
Append-only. Every issuance, download and share is recorded.
DNS provider — Cloudflare
Store an API token to enable auto DNS-01. Token is AES-GCM encrypted at rest.
checking…
Deployment
Runtime configuration (read-only).