CertMagic

Enables fully-managed HTTPS with automatic HTTP-to-HTTPS redirects using a single function call like `certmagic.HTTPS()`, as demonstrated in the README's examples.

Implements intelligent retries with exponential backoff for up to 30 days, challenge rotation, and fallback to staging CAs to overcome network issues and rate limits, ensuring reliability.

Supports shared storage backends for coordinated certificate management across multiple instances or behind load balancers, making it ideal for distributed deployments.

Pioneers on-demand certificate issuance during TLS handshakes for dynamic domain names, with configurable policies, as detailed in the On-Demand TLS section.

Works with any ACME-compliant CA, supports all challenge types including DNS for wildcards, and includes features like OCSP stapling and automatic renewal.