Smallstep Certificates Alternatives

    Smallstep Certificates is described as 'A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH'. There are nine alternatives to Smallstep Certificates for a variety of platforms, including Windows, Linux, Online / Web-based, Self-Hosted solutions and Mac. The best alternative is xca - X Certificate and Key management, which is both free and Open Source. Other great apps like Smallstep Certificates are EJBCA (Freemium, Open Source), VeriSign (Paid), OpenXPKI (Free, Open Source) and CertHat - Tools for Microsoft PKI (Paid).

    This page was last updated Apr 27, 2021

    1. X Certificate and Key management is an interface for managing asymetric keys like RSA or DSA. It is intended as a small CA for creation and signing certificates. It uses the OpenSSL library for the cryptographic operations.
      show more
      • FreemiumOpen Source
      • Mac
      • Windows
      • Linux
      • Self-Hosted
      Enterprise Java Beans Certificate Authority, or EJBCA, is a free software public key infrastructure (PKI) certificate authority software package.
      show more


      • Online
      VeriSign Authentication Services provides solutions that allow companies & consumers to engage in communications & commerce online with confidence.
      No screenshots yet
      • FreeOpen Source
      • Self-Hosted
      OpenXPKI is a software stack that provides all necessary components to manage keys and certificates primarily based on the X509v3 cryptography standard.
      show more
      • Windows
      • Windows Server 2008 R2
      • Windows Server 2012
      PKI solution based on Microsoft AD CS (Active Directory Certificate Services) offers a affordable and powerful digital certificates environment, however sometimes it can be challenging to use without additional tools (3rd party utilities or scripts).
      show more


    2. Pkcs11Admin is an open-source GUI tool for administration of PKCS#11 enabled devices (smartcards, HSMs etc.) which runs under .NET 4.5 on MS Windows and under Mono 3.X on Linux and Mac OS X.
      • Windows
      • Online
      • Chrome OS
      The AppViewX CERT+ platform provides users with a full-cycle certificate management suite, enabling 360-degree control and visibility into network infrastructures.
      show more
      • FreeOpen Source
      • Online
      • Self-Hosted
      • GitHub
      PKIjs is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
    3. The Dogtag Certificate System is an enterprise-class open source Certificate Authority (CA). It supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management, and much more.
      No screenshots yet
    Showing 9 of 9 alternatives