Certsmith is an open-source security engineering project dedicated to providing turnkey, high-assurance Public Key Infrastructure (PKI) appliances for homelabs, enterprise staging environments, and hybrid cloud topologies.

The core architecture strictly isolates offline root authority from operational intermediate issuing daemons. Six distinct issuing authorities serve both RSA and Elliptic Curve cryptographic profiles with automated certificate management via ACME v2 (RFC 8555):

• CR1 (RSA 4096-bit): Maximum security and long-term validity for root-level anchors and core infrastructure.
• CR2 (RSA 3072-bit): Enterprise standard for production services and general application workloads.
• CR3 (RSA 2048-bit): High-throughput compatibility tier for legacy environments and edge devices.
• CE1 (ECDSA P-384): High-assurance elliptic curve tier matching strict compliance requirements.
• CE2 (ECDSA P-256): Modern, lightweight cloud-native default for containers and microservices.
• CE3 (ECDSA P-521): Ultra-grade asymmetric elliptic curve tier for quantum-resistant transitional research.

We enforce standardized engineering guidelines across all projects under the Certsmith organization:

• Security Policy: Vulnerability reporting procedures and response commitments.
• Contributing Guidelines: Branching model, semantic commit conventions, and code standards.
• Code of Conduct: Contributor Covenant v2.1.
• Support Center: Official support channels, FAQ, and technical discussions.