certctl-io/certctl

Self-hosted platform that automates the entire TLS certificate lifecycle, from issuance through renewal to deployment, with zero human intervention. It works with any CA, deploys to any server, and keeps private keys on your infra where they belong. Free, source-available, covers the same lifecycle that enterprise platforms charge $100K+/year for.