Note
This is Spotify's maintained fork of Netflix/lemur, which was archived on July 6, 2026.
We use Lemur internally for TLS certificate lifecycle management across our edge infrastructure. This fork contains bug fixes and operational improvements specific to our deployment. Community contributions are welcome.
The original Spotify fork (master branch, pre-Netflix sync) is preserved
as the old_fork branch for reference.
Lemur manages TLS certificate creation. While not able to issue certificates itself, Lemur acts as a broker between CAs and environments providing a central portal for developers to issue TLS certificates with 'sane' defaults.