ACME SSL Certificates
ACME SSL certificates automate the issuance and renewal of SSL/TLS certificates without the need for manual intervention. They replace the manual deployment of certificates on servers and their regular renewal. The ACME (Automatic Certificate Management Environment) protocol enables a server to communicate directly with a Certificate Authority, validate the domain, obtain a new SSL certificate, and automatically renew it before expiration. ACME certificates are suitable for all types of websites and servers where secure HTTPS communication needs to be ensured with minimal administrative effort.
Get an ACME certificate at a special price and verify that your systems are ready for automated SSL certificate issuance and renewal. From March 2027, certificates will be valid for a MAXIMUM of 100 days.
→ Test automation before it becomes a necessity.
The gradual shortening of SSL certificate validity periods increases the need to automate their issuance and renewal. The entire automated certificate lifecycle is handled by an ACME client – such as Certbot, acme.sh, win-acme, ACME client Lego, or another tool compatible with the ACME protocol. ACME clients support a wide range of server operating systems and web servers, including Apache, Nginx, and IIS. Automated management using ACME significantly simplifies SSL certificate deployment and ensures that websites and services always have an up-to-date and valid SSL certificate.
ACME Certificates
Automated SSL certificates - complete range of ACME certificates
| CA | SSL certificate | Price From | Validation | Issuance Speed | Domains Secured | |
|---|---|---|---|---|---|---|
 |
Certum ACME Commercial SSL | $4.49 | Domain (DV) | Minutes | 1 domain | Detail Buy Now |
|
Certum ACME Commercial WildCard | $49 | Domain (DV) | Minutes | WildCard | Detail Buy Now |
Price from - The calculated annual price of the certificate when ordering more than one year. For more information, click on the certificate detail or order.
Issuance Speed - How long the certification authority will issue the SSL certificate (approximately).
Domains Secured - How many domains you can secure with SSL certificate. WildCard = unlimited sub-domains.
Payment - We accept payments by card, PayPal and bank transfer.
Features and Benefits of ACME Certificates
ACME SSL Certificates
ACME SSL certificates enable automated deployment and renewal. As SSL certificate validity periods are gradually shortened, automation is becoming an essential part of their efficient management.
Automation
Manual management of SSL certificates will soon be impractical, and the lifetimes will only get shorter. With an ACME client, you can automate SSL certificate deployment and renewal without the need for manual intervention.
Immediate Issuance
SSL certificates are issued within minutes using HTTP-01 or DNS-01 domain validation. No key generation, manual file processing, domain validation confirmation, or waiting for the Certificate Authority.
Unlimited Installations
Use the same SSL/TLS certificate on multiple servers without any restrictions. Modern ACME clients make it easier to secure and update SSL certificates on servers.
30-Day Money-Back Guarantee
Customer experience is our first and foremost priority. Is the selected SSL certificate not suitable for your needs? Do you need a different one? We offer all our customers a 30-day money-back guarantee. See our Money-Back Guarantee Policy to learn more.
Trusted by All Major Browsers
Our SSL certificates offer the highest browser compatibility for mobile devices and desktop computers, reducing annoying warnings when accessing a website.
SSLmentor recommendation
ACME SSL certificates are designed for automated deployment and renewal of SSL certificates. With their validity periods being significantly shortened, automation is becoming a practically essential part of SSL certificate management.
More information about ACME
What you should know before you place an order.
ACME SSL Certificates
Depends on the selected certificate type
- Domain Validation (DV) certificates – automatic domain validation using the HTTP-01 or DNS-01 challenge.
Using an ACME client, the CA verifies control of the domain and immediately issues a new SSL certificate. - Organization Validation (OV) certificates – expected to be available from approximately autumn 2026.
Installation Steps
- Order and pay for the ACME SSL certificate.
- Obtain your EAB (External Account Binding) credentials.
- Install a compatible ACME client on your server.
- Configure the ACME client using your EAB credentials (KID and HMAC key).
- The ACME client will automatically issue and renew your SSL certificate.
Domains Secured
Depends on the selected SSL certificate
We offer ACME SSL certificates to secure a single domain, up to 250 different domains simultaneously, or an unlimited number of subdomains with WildCard certificates.
Multi-year certificates
ACME Certificates
We currently offer ACME SSL certificates valid for 1 year.
FAQ
Frequently Asked Questions About ACME SSL Certificates
What are EAB Credentials?
EAB (External Account Binding) credentials are authentication details used to link your ACME client with an account at a Certificate Authority (CA). They allow the CA to identify and authorize your account when requesting SSL certificates through the ACME protocol.
EAB credentials consist of two components: a Key Identifier (KID), which identifies your account, and an HMAC key, which is used to authenticate and securely bind the ACME account to the CA. To connect to the ACME service, you also need the ACME Server URL (Directory URL), which specifies the ACME server endpoint of the Certificate Authority. These details are used when configuring your ACME client. The exact configuration procedure depends on the ACME client you use.
How should I protect my EAB credentials?
EAB credentials should be treated as sensitive authentication data, similar to API keys or passwords. In particular, the HMAC key should be stored securely and should never be published, shared with unauthorized users, or committed to public code repositories. Store your EAB credentials only on servers and systems that require access to the ACME service. Where possible, use environment variables, protected configuration files, or a dedicated secrets management system. Access to the credentials should be limited to authorized users and applications.
How do I install an ACME client?
Installing an ACME client depends on the specific server, operating system, or hosting provider and its support for the ACME protocol. A number of ACME clients are available, such as Certbot, acme.sh, or Lego. Installation and configuration usually require basic server administration experience. We recommend searching online for instructions for your specific server or hosting provider, consulting its documentation, or using one of the AI assistants.
