Translated with AI from the Russian original.
The solution supports popular ACME clients and allows integrating certificate management into CI/CD processes
The Technical Center of Internet Certification Authority (TS TCI) has completed public testing and launched the ACME service into commercial operation. It allows automating the issuance, renewal, and revocation of TLS certificates, as well as integrating their management into CI/CD processes and administration panels.
The service is designed for system administrators, DevOps engineers, developers, and hosting providers working with a large number of domains. Popular ACME clients, including Certbot, acme.sh, and lego, can be used for connection, taking into account the requirements of the certification authority.
The first commercial version supports ECDSA A1 certificates with ECDSA P-256 keys. HTTP-01 and DNS-01 methods are available for domain ownership validation. Validation is performed through controlled internal interfaces, separated from the public API. Issued certificates receive SCT labels from Russian Certificate Transparency logs from Yandex and VK.
The service is available at [https://acme.tlscc.ru/directory](https://acme.tlscc.ru/directory). A separate environment is provided for integration testing, allowing domain validation and automatic certificate installation to be checked before commercial operation.
TCI has been creating a certification authority since 2019, focusing on the requirements of the CA/Browser Forum and WebTrust. Since 2022, the organization has been submitting information about issued certificates to transparency logs. In August 2026, TS TCI became the first participant in the Yandex Browser Root Certificate Program.
