Certbot is one of the most widely used ACME clients, especially on Linux servers. It is developed to make SSL setup as easy as possible, even for beginners, shared hosting users, and standard web servers. If you are using Apache or Nginx, it can install the certificate and update your server settings in just a few steps.
## First register your new Account Binding provided to you
certbot register --server {SERVER_URL_HERE} \
--eab-kid {EAB_KID_HERE} \
--eab-hmac-key {EAB_KEY_HERE}
## Request new certificate for domain
certbot certonly --server {SERVER_URL_HERE} \
--webroot -w /var/www/example -d mydomain.com -d www.mydomain.com
## Renew all previously obtained certificates that are near expiry
certbot renew
acme.sh is a lightweight and flexible ACME client written in shell script. It is especially popular among advanced users because it supports a wide range of DNS providers. This makes it a great choice for issuing wildcard SSL certificates using DNS validation. It gives you more control over how certificates are issued and installed.
## First register your new Account Binding provided to you
acme.sh --server {SERVER_URL_HERE} --register-account \
--eab-kid {EAB_KID_HERE} \
--eab-hmac-key {EAB_KEY_HERE}
## Request new certificate for domain
acme.sh --issue -d mydomain.com -d www.mydomain.com \
-w /home/wwwroot/mydomain.com --server {SERVER_URL_HERE}
## Renew the certificate or recheck for domain validation and issue cert
acme.sh --issue -d mydomain.com -d www.mydomain.com --server {SERVER_URL_HERE} --renew
Posh-ACME makes SSL automation simple without needing complex tools or external dependencies. If your infrastructure relies on Windows servers or you prefer scripting in PowerShell, Posh-ACME is a reliable and flexible choice for managing SSL certificates automatically.
## First register your new Account Binding provided to you
$eabKID = 'EAB_KID_HERE'
$eabHMAC = 'EAB_KEY_HERE'
New-PAAccount -ExtAcctKID $eabKID -ExtAcctHMACKey $eabHMAC -Contact '[email protected]' -AcceptTOS
## Register the CA Server URL
Set-PAServer -DirectoryUrl {SERVER_URL_HERE}
## Request new certificate for domain
New-PACertificate example.com -AcceptTOS
# Renew all orders on the current account
Submit-Renewal
win-acme is designed specifically for Windows servers and IIS users. It works very well with IIS and provides a smooth experience for users who manage websites on Windows. It can automatically install and renew SSL certificates without needing deep technical knowledge.
## Execute the following command to auto-enroll certificate on IIS using WinACME client
wacs.exe --baseuri {SERVER_URL_HERE} --verbose \
--accepttos --emailaddress [email protected] --eab-keyidentifier {EAB_KID_HERE} \
--eab-key {EAB_KEY_HERE}