JellyCert — Summary
What it does: JellyCert is a lightweight web-based certificate manager built specifically for Jellyfin. It solves one problem: Jellyfin requires SSL certificates in PKCS12 (.p12) format, which is awkward to produce and manage manually. JellyCert handles the full lifecycle through a browser interface, running as a single binary with no dependencies.
Main Features
Certificate Management — Generate self-signed certs (RSA/ECDSA), import PEM certificates and convert to PKCS12, upload existing .p12 files, monitor expiry with colour-coded badges, search/filter/sort the list.
Let’s Encrypt QNAP Auto-Sync (key feature) — If your QNAP NAS already has a Let’s Encrypt certificate, JellyCert detects it automatically and converts it to PKCS12 for Jellyfin. No conflict — QNAP keeps renewing it, JellyCert just syncs it every 6 hours.
Reverse Proxy Guide — Generates ready-to-use Caddy, Nginx and Apache configurations to expose Jellyfin on a public domain with automatic HTTPS.
Jellyfin Integration — One-click copy of the certificate path, built-in networking setup guide, explanations of common pitfalls (black screen on IP, mobile app certificate issues).
Security — RFC 7292 compliant PKCS12 tested against .NET/Jellyfin, optional PBKDF2-SHA256 login, zero external dependencies.
Interface — Responsive dark UI, 10 languages
Last update: 19 May 2026
