CertMate Hosting Live In 5 Minutes

Deploy CertMate hosting and run a self-hosted SSL certificate manager that issues and renews TLS certificates over DNS-01 on a dedicated Cloud VPS. xCloud starts the pinned CertMate 2.39.0 container, generates the session secret and API bearer token, keeps certificates, settings and backups on four persistent volumes and serves the web UI and REST API over HTTPS on your own domain.

Deploy your CertMate

No terminal
No technical skills needed
No lock-in, cancel anytime

What is CertMate?

CertMate is a self-hosted certificate lifecycle management platform. It issues and renews TLS certificates, discovers the ones you did not issue, keeps a single inventory of what exists across your estate and offers a web UI, a REST API and a command-line tool, with DNS-01 validation, wildcard certificates and support for Let's Encrypt, other ACME CAs and private CAs. Run on your own server it is a self-hosted CertMate, released under the MIT licence.

On xCloud it is one container, fabriziosalmi/certmate 2.39.0 pinned by digest, with no database sidecar. The certmate_certificates, certmate_data, certmate_logs and certmate_backups volumes hold the state. It must run as a single instance, because its renewal scheduler runs inside the app, and external key vault storage packages are not in the image.

From Sign-Up to a Live CertMate In Just 3 Easy Steps

A CertMate install normally means a Python container, a session secret, an API token, four state volumes, a first administrator, a domain and a certificate before the first certificate is issued. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick CertMate from the OneClick catalog. Choose a domain and a server; the install form has no application fields, because xCloud generates the secret key and the API bearer token.
Step 02
We Deploy It For You
One click. We start fabriziosalmi/certmate 2.39.0, pinned by digest, as one container with no database sidecar, mount certmate_certificates, certmate_data, certmate_logs and certmate_backups, and publish HTTPS. It is usually ready within a minute.
Step 03
Create The First Admin Straight Away
Open the URL, paste the API bearer token, then create the first administrator with a password of at least 12 characters including a digit and a symbol. Add a DNS provider in Settings and request your first certificate.

Everything CertMate Does, On Your Own Server

CertMate 2.39.0 runs here as a single instance, with certificates, settings and backups kept on volumes you own.

Issue And Renew Over DNS-01
CertMate issues and renews TLS certificates by DNS-01 with Let's Encrypt and other ACME CAs, renewing 30 days before expiry per upstream.
Wildcard Certificates
A single certificate can cover *.example.com and example.com, validated over DNS with the provider credentials you add in Settings.
Certificate Inventory
Keep one inventory of what exists across your estate, including certificates you did not issue, which the scanner discovers.
REST API And CLI
Drive the whole lifecycle from the REST API or the certmate-cli command-line tool, authenticated with scoped keys or the bearer token.
Private CA Support
Upstream supports internal or corporate CAs with custom trust bundles and ACME compatibility, alongside public CAs.
Encrypted Backups Optional
Set CERTMATE_BACKUP_PASSPHRASE to make restore-capable backups. Without it, automatic backups are masked and cannot restore the instance.

Everything You Need To Run Your Certificate Manager 24/7

Managed hosting for CertMate, so the parts that keep it online are not your problem.

CertMate 2.39.0 deployed instantly
Image pinned by digest
Secret key and API token generated
Four persistent volumes
Free SSL certificate for the UI
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With CertMate

Issue wildcard certificates for your domains
Add your DNS provider credentials and request a certificate for a wildcard and the bare domain without exposing a web server for validation.
Renew certificates before they expire
Rely on automatic renewal 30 days before expiry, with deploy hooks to reload services, and watch the inventory for failures.
Find certificates nobody is tracking
Use discovery and the inventory to see certificates across your estate, including ones you did not issue yourself.
Script certificates from CI
Use the REST API or certmate-cli with scoped keys to create and fetch certificates from your pipelines.

CertMate vs Alternatives

Venafi: A commercial machine-identity and certificate management platform; CertMate is MIT-licensed software you run yourself, focused on issuing, renewing and inventorying TLS certificates.
Certbot: The common ACME client run from the command line on a server; CertMate adds a web UI, an inventory, scoped API keys and DNS-01 across providers in one place.
Caddy Manager: A manager for Caddy web servers, available as its own OneClick app; it manages server configuration where CertMate manages the certificates themselves.
Certimate: A different self-hosted project that also automates certificate issuance; it is not CertMate, so compare their features and deployment models before choosing.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for CertMate hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

Room for CertMate beside other apps on the same server.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. CertMate itself is released under the MIT licence.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy CertMate on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Certificate Manager?

CertMate on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your data. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can I run CertMate in Docker?

Yes, and this template is CertMate Docker hosting without the setup: the fabriziosalmi/certmate 2.39.0 image pinned by digest, one web container with no database sidecar, four named volumes and an HTTPS route to port 8000. Upstream publishes the image on Docker Hub.

How much RAM does CertMate need?

CertMate's one container is sized at 512 MB of memory, one core and 2 GB of storage in the template. Uploads of certificate material are capped at 50 MiB. The 6 GB plan is the one this page offers first.

Does CertMate use DNS-01 validation?

Yes. Upstream describes issuance and renewal over DNS-01, which is how wildcard certificates are validated. You add credentials for your DNS provider in Settings, or a Cloudflare token in the environment, and CertMate handles the challenge.

Can CertMate issue wildcard certificates?

Yes, upstream lists wildcard support: one certificate can cover *.example.com and example.com. It relies on DNS-01, so your DNS provider credentials must be configured in CertMate before you request the certificate, and the wildcard covers only one level of subdomain names.

How do I create the first CertMate admin?

Open the URL straight after install, paste the API bearer token when asked, and create the first administrator with a password of at least 12 characters including a digit and a symbol. There is no default password, so do this before sharing the address.

What is the CertMate API bearer token?

A generated 48-character operator token for the API and the first-admin bootstrap, shown in the credentials. It is re-read from the environment on every start, so change it in the Environment editor and redeploy; in-app edits do not last.

Is CertMate free?

Yes. CertMate is released under the MIT licence, so the software has no licence fee; the Cloud VPS is what you rent. An enterprise edition exists upstream under a different licence and is not part of this template.

How do I back up CertMate?

Back up all four volumes together: certificates and keys, data with settings and the secret key, logs and backups. Keep SECRET_KEY, the API token and any backup passphrase off the server. Backups here are your task: make them regularly and try restoring one.

Backup and restore Docker apps

How do I upgrade CertMate?

Nothing upgrades itself: 2.39.0 is pinned by digest, so a running install remains on that release until you choose to move. To move up, back up all four volumes, then adopt a newer template version when one is published; do not edit the image tag or digest yourself. Run only a single replica, because renewals are scheduled in the app.

Is this a CertMate cloud service?

It is CertMate on a dedicated Cloud VPS under your xCloud login, a CertMate cloud of your own at your domain. It issues certificates but does not install them on your servers for you; use deploy hooks or fetch them through the API.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.