acmesh-official/acme.sh

Health v2 · maintenance only

Adoption not part of the score

47549 stars · 5657 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

acme.sh is a pure POSIX shell script ACME protocol client that automates issuing and renewing SSL/TLS certificates from Let's Encrypt, ZeroSSL, Buypass, and other CAs. It has zero dependencies, requires no root access, supports dozens of DNS providers for domain validation, and handles the full certificate lifecycle including cron-based auto-renewal and ARI support.

Use cases

• issue free Let's Encrypt certificates from a shell script
• automate SSL certificate renewal with cron
• get wildcard certificates via DNS validation
• manage TLS certs on servers without installing dependencies
• automate certificate issuance for nginx or apache
• renew certificates for short 47-day certificate lifetimes
• set up HTTPS for a self-hosted server

When to choose

• you want a dependency-free, pure shell ACME client that runs anywhere
• you need DNS-01 validation with a wide range of DNS provider integrations
• you're automating certs on minimal or embedded Unix systems
• you want cron-based auto-renewal and ARI support out of the box

When to avoid

• you prefer a GUI or managed certificate service
• you want ACME built into your web server (e.g. Caddy)
• you're on Windows/IIS and prefer win-acme
• you need a client with a plugin architecture in a language like Python (certbot)

Facets

cli-tool · maturity stable

security workflow-automation cli developer-tools scheduling security web-development self-hosted windows bsd cli cross-platform acme-client lets-encrypt ssl-tls certificate-automation posix-shell zerossl dns-validation wildcard-certificates cron-renewal devops command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="acmesh-official/acme.sh")