Certificate Lifecycle management
hi Guys,
I appreciate the time if you read all of this.
Certificates are one of those things that only get attention when they break something.
An internal service stops working.
A browser starts throwing trust warnings.
A customer-facing cert expires.
Someone asks where the private key is.
Nobody is quite sure who uploaded it, who can access it, or what else depends on it.
That’s the problem CertLocker is trying to solve.
CertLocker is a certificate and access control platform for teams running real infrastructure. The certificate side is built around visibility, control, and lifecycle management rather than just storing PEM
files somewhere and hoping everyone remembers renewal dates.
What CertLocker supports today:
- certificate inventory with search, paging, sorting, and group filters
- upload and management of PEM/CRT certificates
- optional private key storage with protected read paths
- certificate parsing for domains, SANs, issuer, validity dates, and fingerprints
- expiry tracking, including days-until-expiry visibility
- active, expired, and revoked status handling
- certificate download for authorized users
- certificate deletion for authorized users
- certificate tokens for controlled access workflows
- group-scoped certificate visibility
- role-based permissions for viewing, adding, downloading, and deleting certs
- audit logging around certificate actions
- dashboard visibility for renewable/expiring assets
- ACME workflow support for automated certificate operations
- DNS provider management for certificate automation workflows
The bigger idea is that certificates should not be treated as loose files.
They usually sit next to secrets, hosts, SSH access, bastions, service accounts, deployment scripts, and human operators. CertLocker connects those pieces together so a certificate is a managed asset with
ownership, permissions, expiry, audit history, and controlled access.
We're offering free registration and management here trust.certlocker.io
And we do offer an on-prem model. But you can check out the blog as well I'm pretty active and you can see the problems we are solving https://certlocker.io/blog/