CertPilot
Open-source PKI and certificate lifecycle management. Discovery across Certificate Transparency logs and hosts behind firewalls, renewals deployed in declared waves and verified by handshake, and issuing CAs watched on the same clock as everything they sign.
Six ways in
Evaluate
Whether CertPilot fits the estate you have, and what is actually built.
Walk through it
Five connected paths, end to end, with every command run rather than written from memory.
Deploy
Standing up a control plane you run yourself, and the schema you apply deliberately.
Operate
The day-to-day: what it finds, what it tells you, and what to do when something breaks.
Integrate
Connecting CertPilot to the servers that serve certificates and the CAs that sign them.
Reference
Every endpoint, generated from the router rather than written by hand.
Contribute
Where the code lives, what each repository is responsible for, and how the documentation is checked against it.
Endpoint reference
- Health2
- Dashboard3
- Live event stream1
- Certificates8
- PKI / CA Management12
- CA Accounts & Gateways6
- Renewal queue5
- Deployment14
- Discovery11
- Certificate Transparency6
- Cloud inventory7
- Agents12
- The agent API7
- Notification channels5
- Custom metadata fields4
- Policies5
- Display Tokens3
- ACME credentials3
- Accounts4
- Audit record integrity1
- Certificate templates5
- Sign-in discovery3
- The caller's own identity3
Who can call what
Four roles, held in CertPilot's own table rather than read from a token claim, so an identity provider cannot grant or change them.
- 1viewer
- 2auditor
- 3operator
- 4admin