KrakenKey
TLS certificate management, automated.
Get a TLS certificate in 4 minutes. No manual DNS, no cron jobs, no forgotten renewals.
Free to use. No credit card required.
What KrakenKey does today
Privacy-first certificate issuance with automated DNS-01 challenges. No manual steps.
Client-Side CSR Generation
Generate Certificate Signing Requests in your browser using WebCrypto API. Your private keys never leave your environment.
ACME/Let's Encrypt Automation
Fully automated DNS-01 challenge resolution via Cloudflare. Certificate issued and ready in approximately 4 minutes.
REST API
Issue and retrieve certificates programmatically. Every action in the dashboard is also available via REST API.
Domain Management
Add domains, verify ownership via DNS TXT records, and scope certificate issuance per domain.
The certificate deadline is here
CA/Browser Forum Ballot SC-081v3 is phasing TLS certificate lifetimes down to 47 days. Manual renewal won't scale.
How it works
From CSR to issued certificate in four steps. Zero manual DNS.
Generate CSR in-browser
Use the WebCrypto API to generate your Certificate Signing Request. Your private key never leaves your device.
Submit via dashboard or API
Upload your CSR through the web dashboard or submit it programmatically via REST API.
Automatic DNS-01 challenge
KrakenKey handles the ACME DNS-01 challenge automatically — no manual DNS records needed.
Certificate issued in ~4 min
Your TLS certificate is issued and ready to download. Set up auto-renewal so you never think about it again.
Free to use
Get started with automated TLS certificate issuance at no cost. Paid plans with monitoring, auto-renewal, and team features are coming soon.
Free
- ✓ ACME automation via Let's Encrypt
- ✓ In-browser CSR generator
- ✓ DNS-01 challenge automation
- ✓ REST API for programmatic access
- ✓ Web dashboard
Ready to automate your certificates?
KrakenKey automates certificate management so you don't have to.
Get Started FreeFree to use. No credit card required.