EcuremACM - Automated TLS Certificate Management

Create New Certificate

Generate SSL certificates with multiple CA providers and advanced DNS challenge support

Let's Encrypt DigiCert Private CA

Primary Domain Name

Supports wildcard domains (*.example.com) and single domains

Additional Domains (SAN) Optional

Comma-separated list of Subject Alternative Names (SANs) to include in the certificate

Certificate Authority

Challenge Type

HTTP-01 does not require DNS credentials but cannot issue wildcard certificates

DNS Provider

DNS provider for domain validation challenge

Free SSL certificates with automatic renewal

💡 Quick Tips:

• Wildcard certificates work for unlimited subdomains
• DigiCert requires EAB credentials (configured in Settings)
• Private CAs are perfect for internal/corporate use
• Certificates auto-renew 30 days before expiry

Your Certificates

/

Domain	Status	Expires	Provider	Deployment	Actions

Total Certificates

Active

Revoked

By Usage

Create Client Certificate

For mTLS, VPN, or user authentication

Common Name (Required)

Organization

Usage Type

Valid For (Days)

Notes

Generate private key (recommended)

Upload a CSV file with columns: common_name, email, organization, cert_usage (optional), notes (optional)

Drag and drop CSV file here

or click to select

Preview (0 rows)

Client Certificates

Common Name	Email	Usage	Created	Expires	Status	Actions
Loading certificates...

Automation curl Command

Copy this command:

Note: Replace YOUR_API_TOKEN with your actual API bearer token.

Usage: This downloads a ZIP file containing cert.pem, chain.pem, fullchain.pem, and privkey.pem

Example extraction:

unzip domain.com-tls.zip -d /etc/ssl/certs/domain.com/

Notifications