The Technical Center of Internet (TCI) has officially launched its ACME service for production use following a public testing phase. The service automates the issuance and renewal of TLS certificates, allowing integration into CI/CD pipelines and management dashboards to reduce manual administrative tasks.
The service supports the open ACME protocol and is compatible with standard clients such as Certbot, acme.sh, and lego. In its initial production version, it issues ECDSA A1 certificates with P-256 keys. Domain validation is supported via HTTP-01 and DNS-01 methods, and certificate revocation is also available.
TCI has implemented a secure architecture where the public API is isolated from the core certification center. All requests undergo validation of domain ownership and key parameters. Issued certificates include SCT markers from Yandex and VK transparency logs to ensure public auditability.
A separate testing environment is available for developers to debug integrations and automated installation processes before moving to production. TCI, which began building its certification center in 2019, became the first participant in the Yandex Browser Root Certificate Program in August 2026.
