CertKit for automating SSL certs to Windows, JKS, and appliances
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
We’ve been managing web infrastructure for a long time. For most of that time, certificate management meant buying a cert, copying it to wherever it needed to go, and setting a calendar reminder. That works when certificates last a year. It stops working when lifetimes drop to 47 days.Certbot is the obvious answer but it doesn’t cover everything. It requires ACME on each server, which means each server needs to be internet-reachable or have DNS provider access. That rules out Windows servers, JKS keystores, and appliances that can’t run Certbot or speak ACME at all.CertKit handles ACME centrally. A source-available Go agent runs on each server and handles deployment, including Windows, JKS, and appliances via custom file destinations and post-deploy commands. Validation uses a delegated CNAME so we never need your DNS provider credentials.We just wrapped up our beta and launched today. Happy to answer any questions.https://www.certkit.io/
HN · launched Apr 8, 2026 · 7 upvotes (top 61%) · 0 views
Niche: certificate and license management software · 65 launches, 6 in the last 7 days ▼ -14% · Explore this niche →
Category and tags
- Horizontal
- Workflow automation
- B2B
- Not AI
- Commercial product
Visit website ↗ Source listing ↗
More like this: all 65 launches in certificate and license management software →
Could you build this?
No Automating enterprise certificate deployments across Windows OS internals, legacy Java Keystores, RDP, and proprietary network appliances requires deep systems administration, PKI domain knowledge, and specialized host agents.
What it would actually take: Building CertKit requires deploying cross-platform native agents (Go/C#) capable of interfacing with the Windows CryptoAPI/Certificate Store, Active Directory, IIS, and managing JKS/PKCS12 keystores via JVM internals or OpenSSL. The backend needs an ACME client/server infrastructure integrated with public CAs (Let's Encrypt, DigiCert) and private PKI (Vault, AD CS), along with hardened key management (HSMs or secure enterprise key vaults) and remote deployment primitives over WinRM and SSH.
Discussion
No comments on this launch.
Competitors
Other products that read as similar to this one : 108 launches clear the similarity bar, closest 8 shown.
Attention rank: #42 of 109 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 158 days after the earliest competitor.
- I rewrote my 2012 self-signed cert generator in Go · hn · 2026-04-02 · 9 upvotes · similarity 0.46
- SSL Certificate Checker · ph · 2026-09-24 · 2 upvotes · similarity 0.45
- X509-certificate-exporter · hn · 2026-05-12 · 8 upvotes · similarity 0.45
- CertNotify · ph · 2026-10-14 · 1 upvotes · similarity 0.43
- Ephemeral SSH · ph · 2026-11-11 · 1 upvotes · similarity 0.43
- TLS Certificate Management and PKI · hn · 2026-05-22 · 10 upvotes · similarity 0.43
- Govigie · ph · 2026-09-10 · 1 upvotes · similarity 0.42
- CertAvert · ph · 2026-09-29 · 1 upvotes · similarity 0.42
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.