diff --git a/tests/unit/certs.bats b/tests/unit/certs.bats
new file mode 100644
index 00000000000..d321c781f34
--- /dev/null
+++ b/tests/unit/certs.bats
@@ -0,0 +1,53 @@
+#!/usr/bin/env bats
+
+load test_helper
+
+setup_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  mkdir -p $TLS
+  tar xf $BATS_TEST_DIRNAME/server_ssl.tar -C $TLS
+  sudo chown -R dokku:dokku $TLS
+}
+
+teardown_local_tls() {
+  TLS=$BATS_TMPDIR/tls
+  rm -R $TLS
+}
+
+setup() {
+  create_app
+  setup_local_tls
+}
+
+teardown() {
+  destroy_app
+  teardown_local_tls
+}
+
+@test "certs:add" {
+  run bash -c "dokku certs:add $TEST_APP $BATS_TMPDIR/tls/server.crt $BATS_TMPDIR/tls/server.key"
+  echo "output: "$output
+  echo "status: "$status
+  assert_success
+}
+
+@test "certs:add < tar" {
+  run bash -c "dokku certs:add $TEST_APP < $BATS_TEST_DIRNAME/server_ssl.tar"
+  echo "output: "$output
+  echo "status: "$status
+  assert_success
+}
+
+@test "certs:info" {
+  run bash -c "dokku certs:add $TEST_APP < $BATS_TEST_DIRNAME/server_ssl.tar && dokku certs:info $TEST_APP"
+  echo "output: "$output
+  echo "status: "$status
+  assert_success
+}
+
+@test "certs:remove" {
+  run bash -c "dokku certs:add $TEST_APP < $BATS_TEST_DIRNAME/server_ssl.tar && dokku certs:remove $TEST_APP"
+  echo "output: "$output
+  echo "status: "$status
+  assert_success
+}