Self-hosting 40+ client sites across Contabo, OVHcloud, and some old RackNerd resellers. Certs from various ACME providers, some paid legacy ones. Currently spreadsheet + calendar reminders. Fails.
Requirements:
- Central dashboard for expiry
- Alerting: email minimum, webhook preferred
- Must handle non-ACME (client-mandated Sectigo, etc.)
- Prefer self-hosted, will consider SaaS
Not looking for "use Let's Encrypt and forget it"—these clients have compliance requirements I don't control.
Currently 3 expired this quarter because I was chasing a BGP route leak at CloudCone and forgot to check the spreadsheet. RPKI would have caught the leak faster than I caught the certs.
iBGP, eBGP, don't care, just peer