Skip to content

Case studyOur own product

Certver

Making HTTPS certificates a non-event.

A certificate service that issues free HTTPS certificates with one DNS record and renews them before they expire, for people and for AI assistants.

New certificate

shop.example.com

  1. DNS TXT record found
  2. Validated by Let's Encrypt
  3. Certificate issued
Our role
Product strategy · Interface design · Engineering · MCP server · Operations
Technology
ACME · Let's Encrypt · DNS-01 validation · MCP · OAuth · Webhooks
Web security
Visit certver.com

The problem

Free certificates from Let's Encrypt last 90 days. Renewing them usually means installing and babysitting tools on every server, and one missed renewal takes a site offline, often at the worst moment. Most monitoring only speaks up after something is already wrong.

Our judgment

  1. 01

    Validate without touching the server

    Ownership is proven with one DNS TXT record, so nothing is installed on the customer's servers, and wildcards work the same way.

  2. 02

    Renew early, watch everything

    Renewals start well before expiry. Monitoring covers any domain, wherever its certificate came from, with alerts to email, Slack, Discord and webhooks.

  3. 03

    Open it to agents

    An MCP server with OAuth sign-in lets Claude and other assistants request, renew and inspect certificates in conversation.

In production

Screens from the running products, with example data.

A wildcard certificate, issued and ready to deploy, with setup steps for each kind of server.
A wildcard certificate, issued and ready to deploy, with setup steps for each kind of server.
Every certificate in one list, with the days left at a glance.
Every certificate in one list, with the days left at a glance.

Results

$0
for a certificate on every plan, wildcards included.
1
DNS record to prove ownership. Nothing to install on the server.
MCP
server, so AI assistants can issue and inspect certificates.

How it is built

Free, wildcards included

Certificates cost nothing on every plan. Issuance is never the upsell.

One DNS record

Add the single TXT record the page asks for. No agents to install on your server.

Automatic renewal

A renewal starts well before expiry, so a certificate never lapses on a weekend.

Monitoring for any domain

Watch expiry and TLS configuration for domains wherever their certificates came from.

Alerts where you work

Email, Slack, Discord and webhooks, before anything turns red.

An MCP server

Connect Claude or another assistant and issue or inspect certificates in conversation.

Next case studyBeeDropFile transfer with no server in the middle.

The next generation of software can start with one idea.

Exploring an AI product, redesigning an existing business system, or looking for a way to bring AI into real work? Talk to us, and we will help turn what is possible into a product people can use.

Start a product conversation