acme.sh
Shell-script ACME client for issuing and renewing TLS certificates, e.g. from Let's Encrypt.
Recommended for getting Let's Encrypt certificates on personal and on-prem servers123, especially via DNS validation for wildcard and private or split-DNS setups.456 The only caveat raised is that it switched to ZeroSSL as the default CA, which surprised one user, though it worked fine for them.7
Why people recommend it
DNS validation · 3
Commenters use its DNS validation for wildcard certificates and private services, and point to its DNS alias mode for domains they can't update.
“put it on some public DNS that can do DNS validation with acme.sh”
“I use acme.sh with DNS validation”
Show 1 more
“See also perhaps DNS aliasing in case you are not able to dynamically update your 'primary' domain”
Self-hosted certs · 2
Used to get certificates for personal and on-prem servers without relying on a third-party service.
“Use Acme.sh / lets encrypt for certs.”
“I use acme.sh for certs on my personal server”
Notification hooks · 1
Can send notifications by email, XMPP, or HTTP(S) requests, with templates for popular webhooks.
“I personally use acme.sh which can be configured to use email, XMPP, or HTTP(S) requests with prebuilt templates for most popular webhooks”
Caveats and dissent
ZeroSSL default · 1
One user was surprised it started using ZeroSSL by default, though it worked fine.
“I use acme.sh for certs on my personal server”
Often compared with
Who recommends it in their own words
Threads where it came up
Data: acme-sh.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 6
“Use Acme.sh / lets encrypt for certs.”
“I use acme.sh with DNS validation”
“See also perhaps DNS aliasing in case you are not able to dynamically update your 'primary' domain”
“put it on some public DNS that can do DNS validation with acme.sh”
“I use acme.sh for certs on my personal server”
“I personally use acme.sh which can be configured to use email, XMPP, or HTTP(S) requests with prebuilt templates for most popular webhooks”