KrakenKey automates TLS certificate issuance using ACME DNS-01 challenges. Submit a CSR through the dashboard, CLI, or REST API, and your certificate is issued in about 4 minutes. Private keys are generated client-side and never touch our servers. Certificate monitoring, expiry notifications, and auto-renewal are built in. Free tier includes 3 domains and 10 certificates. Open source.