> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificate Management

> Manage Certificate Authorities and automate X.509 certificate lifecycle management across your organization.

Infisical Certificate Manager is a centralized platform for managing X.509 certificates across your organization. Issue certificates for TLS, mTLS, and device authentication — whether from your own private CAs or external providers like DigiCert and Let's Encrypt.

The short video below provides a guided overview of Infisical's certificate management capabilities and key concepts, helping you build the right mental model before diving into the rest of the documentation.

<br />

<div style={{ position: "relative", paddingBottom: "56.25%", height: 0, overflow: "hidden", maxWidth: "100%" }}>
  <iframe src="https://www.youtube.com/embed/jP-9Ak0tr8A" title="YouTube video player" style={{ position: "absolute", top: 0, left: 0, width: "100%", height: "100%", border: 0 }} allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen />
</div>

<br />

<Card title="Get Started" icon="rocket" href="/documentation/platform/pki/getting-started">
  New to Certificate Manager? Start here to understand the core concepts and issue your first certificate.
</Card>

## Core Capabilities

<CardGroup cols={2}>
  <Card title="Issue Certificates" icon="certificate" href="/documentation/platform/pki/applications/overview">
    Issue X.509 certificates via API, ACME, EST, or SCEP for TLS, mTLS, and device authentication.
  </Card>

  <Card title="Sign Code" icon="file-signature" href="/documentation/platform/pki/code-signing/overview">
    Sign software artifacts with centralized key management, approval workflows, and PKCS#11 integration.
  </Card>

  <Card title="Discover Certificates" icon="radar" href="/documentation/platform/pki/discovery/overview">
    Scan your infrastructure to find and inventory certificates you didn't know existed.
  </Card>

  <Card title="Sync Certificates" icon="arrows-rotate" href="/documentation/platform/pki/applications/certificate-syncs/overview">
    Push certificates to AWS ACM, Azure Key Vault, Cloudflare, and other destinations.
  </Card>
</CardGroup>

## Lifecycle Management

<CardGroup cols={2}>
  <Card title="Auto-Renewal" icon="arrows-spin" href="/documentation/platform/pki/applications/enrollment-methods/overview">
    Automate certificate renewal so nothing expires unexpectedly.
  </Card>

  <Card title="Alerting" icon="bell" href="/documentation/platform/pki/applications/alerting/overview">
    Get notified via Slack, PagerDuty, or webhooks when certificates expire or lifecycle events occur.
  </Card>

  <Card title="Approval Workflows" icon="check-double" href="/documentation/platform/pki/applications/approvals">
    Require human review before high-value certificates are issued.
  </Card>

  <Card title="Certificate Authorities" icon="building-columns" href="/documentation/platform/pki/ca/overview">
    Create private CA hierarchies or connect external CAs like DigiCert, Let's Encrypt, and AWS PCA.
  </Card>
</CardGroup>