# Ultimate Certificate Manager

> Manage your own PKI with this web-based CA: issue certificates, run ACME/SCEP/EST servers, integrate with Active Directory, and automate renewals.

- **Category:** Certificate Management
- **Licence:** AGPL-3.0
- **Latest version:** v2.246
- **Open source:** oss
- **Languages:** JavaScript, Python
- **Platforms:** Docker, Docker Compose, Linux, Helm, Debian
- **Tags:** Security, Pki, Acme, Homelab, Rbac, OIDC, SAML, Audit log, Self Hosting, Letsencrypt, X509, Webauthn, Fido2, Mtls, Fips, Ssl certificates, Hsm, Certificate authority, Certificate Management, Scep, Est, Ocsp, Crl, SSH Ca, Windows Autoenrollment, Adcs, Intune, Deploy Hooks, Certificate Discovery, Scep Server

## Description

A web-based certificate authority platform for running your own PKI. It provides a complete CA hierarchy with root and intermediate CAs, full certificate lifecycle management (issue, sign, renew, revoke, export), and support for major PKI protocols including ACME (RFC 8555 with ARI, EAB, profiles), SCEP (RFC 8894), EST (RFC 7030), OCSP (RFC 6960), CRL/CDP with Delta CRLs, and RFC 3161 Timestamp Authority. It integrates with Microsoft AD CS for full lifecycle management, Windows autoenrollment via XCEP/WSTEP, and Microsoft Intune SCEP. Hardware security module support covers SoftHSM, PKCS#11, Azure Key Vault, Google Cloud KMS, and HashiCorp Vault. Additional features: SSH certificate authority, network certificate discovery, deploy hooks for pushing renewed certificates, RBAC with custom roles, LDAP/OAuth2/SAML SSO, WebAuthn/FIDO2 and TOTP 2FA, audit logs, private key encryption at rest, FIPS mode preview, Prometheus metrics, encrypted backups, and a responsive UI with 6 themes (light/dark). It runs via Docker, native Linux packages (.deb/.rpm), or Helm on Kubernetes, using SQLite by default with optional PostgreSQL.

## Links

- [Homepage](https://github.com/neyslim/ultimate-ca-manager)
- [Website](https://ucm.tools)
- [Docker](neyslim/ultimate-ca-manager)
- [Documentation](https://ucm.tools/docs)
- [GitHub Wiki](https://github.com/NeySlim/ultimate-ca-manager/wiki)
- [API Reference](https://github.com/NeySlim/ultimate-ca-manager/wiki/API-Reference)
- [Changelog](https://github.com/NeySlim/ultimate-ca-manager/blob/main/CHANGELOG.md)
- [GitHub Issues](https://github.com/NeySlim/ultimate-ca-manager/issues)
- [GitHub Discussions](https://github.com/NeySlim/ultimate-ca-manager/discussions)
- [Contributing Guide](https://github.com/NeySlim/ultimate-ca-manager/blob/main/CONTRIBUTING.md)

---
Source: https://selfhost.directory/project/ultimate-ca-manager