Skip to content
Capabilities

Everything you need to secure a domain — and every domain after it.

AutoCertify handles the whole lifecycle of TLS — validation, issuance, installation and renewal — so a certificate is live in minutes and stays live forever. Simple enough for a shop owner on a bad morning; programmable enough for a platform running ten thousand domains.

Automatic certificate issuance

A valid certificate, issued and installed for you — then renewed forever.

AutoCertify requests, validates and installs a publicly-trusted TLS certificate the moment domain control is confirmed. Renewals happen automatically, weeks ahead of expiry, so a certificate never lapses on your watch. There are no keys to generate, no cron jobs to babysit, no 3 a.m. expiry pages.

  • Publicly-trusted certificates issued through Cloudflare for SaaS — no self-signed shortcuts
  • Automatic renewal well before expiry, with status you can actually see
  • A domain only ever reads “Active” once the certificate is genuinely live — never a faked state

Custom hostnames & delegated DCV

Bring any domain. Prove control once with a single CNAME.

Point one delegation record at AutoCertify and we take over the entire ACME dance for that hostname — the challenge, the validation, the renewal. Delegated DCV means you add the record a single time and every future renewal validates itself, with zero further DNS changes from you.

  • One CNAME to _acme-challenge — copy, paste, done; we handle every renewal after that
  • Works on apex domains and individual subdomains — add each hostname once, at any registrar
  • Live DNS checks tell you the record is right before you ever leave the page

The only thing you touch

Add this one DNS record Waiting for DNS
Type
CNAME
Name
_acme-challenge.shop.example.com
Value
shop.example.com.a1b2c3d4.dcv.cloudflare.com
TTL
300

One CNAME to _acme-challenge — added once, it validates every future renewal on its own. No repeat DNS changes, ever.

Merchant self-serve

Built for the shop owner, not just the sysadmin.

The dashboard speaks plain language: add your site, copy the record, paste it at your registrar, watch it turn green. Registrar-specific instructions walk non-technical owners through GoDaddy, Namecheap, Squarespace and the rest — and when they'd rather hand it off, one link invites their web person to add the record without touching the account.

  • Step-by-step, registrar-aware instructions with copy buttons — no jargon
  • Invite a developer or DNS admin with a scoped link; they add one record, nothing more
  • Plain-English status the whole way: pending → verifying → secured
Add your site No jargon
Pending Verifying Secured

Step-by-step for your registrar

GoDaddyNamecheapSquarespaceWixCloudflare

Invite your DNS admin

One scoped link — they add the record, nothing more.

A programmable certificate API

Everything the dashboard does, over a clean REST API.

Provision domains, fetch delegation records, trigger verification, read certificate status and subscribe to webhooks — all with a scoped API key. Platforms and agencies automate SSL for thousands of customer domains without a human ever opening a ticket.

  • REST endpoints for domains, certificates, verification links, usage and webhooks
  • Idempotent domain creation and bulk provisioning for onboarding at scale
  • Signed webhooks fire the instant a certificate goes active, renews or needs attention
POST /v1/domains 
curl -X POST https://api.autocertify.net/v1/domains \
  -H "Authorization: Bearer $AUTOCERTIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "apex": "shop.example.com" }'

# → 201 Created
# {
#   "id": "dom_8Qp…",
#   "apex": "shop.example.com",
#   "status": "pending",
#   "delegationRecord": {
#     "type": "CNAME",
#     "host": "_acme-challenge.shop.example.com",
#     "value": "shop.example.com.a1b2c3d4.dcv.cloudflare.com"
#   }
# }

Renewal monitoring & alerts

The expiry you never have to think about.

AutoCertify keeps an eye on the state that matters — delegation health and certificate validity — and surfaces any problem in the dashboard and over signed webhooks. If a record drifts or a renewal needs attention, you see it early, long before a visitor ever hits a warning.

  • Health checks on delegation and certificate validity, right in the dashboard
  • Signed webhooks fire on every status change — catch drift early, not in a post-mortem
  • A single dashboard for every domain, its status and its history

Teams, clients & audit

Organize domains by client, with roles and a full audit trail.

Group domains under clients, invite teammates with the right role, and keep an append-only record of who did what. Agencies and platforms manage hundreds of customer domains with clean separation and accountability built in.

  • Client workspaces to keep each customer's domains cleanly separated
  • Role-based team access — owner, admin and member
  • Append-only audit log of every domain, certificate and key event
POST /v1/domains/query 
curl -X POST https://api.autocertify.net/v1/domains/query \
  -H "Authorization: Bearer $AUTOCERTIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{ "clientId": "cli_northwind", "page": { "limit": 50 } }'

# → 200 OK — every domain under one client, cleanly scoped
# {
#   "items": [
#     { "id": "dom_8Qp…", "apex": "shop.northwind.co",
#       "status": "active", "clientId": "cli_northwind" },
#     { "id": "dom_R2m…", "apex": "help.northwind.co",
#       "status": "active", "clientId": "cli_northwind" }
#   ],
#   "total": 2
# }
Real certificates, or nothing

Start with one domain. Grow into the API when you’re ready.

Every capability here works from your first free domain. Nothing is faked — a domain reads “Secured” only when a real, publicly-trusted certificate is genuinely live.

Compare plans Read the docs

Or secure a domain free