go-acme/lego

Health v2 · maintenance only

Adoption not part of the score

9835 stars · 1161 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Lego is an ACME client and Go library for obtaining, renewing, and revoking TLS certificates from Let's Encrypt and other ACME CAs. It supports all major ACME challenge types and integrates with over 200 DNS providers for automated DNS-01 validation.

Use cases

• automatically obtain and renew Let's Encrypt certificates
• issue wildcard certificates via DNS-01 challenge
• get TLS certificates for IP addresses
• automate certificate management in Go applications
• revoke expired or compromised certificates
• obtain certificates from ZeroSSL or other ACME CAs
• automate HTTPS certificate provisioning for many domains across DNS providers

When to choose

• you need programmatic ACME certificate automation in Go
• your DNS provider is among the 200+ supported integrations
• you need a CLI for scripted certificate issuance and renewal
• you need advanced ACME features like ARI, IP certificates, or custom challenge solvers

When to avoid

• you want a turnkey web server with automatic HTTPS like Caddy or Traefik
• you need a non-Go client and prefer certbot's Python ecosystem and plugins
• you only need certificates for a single simple website without automation

Facets

library · maturity active

security cli http-client networking security developer-tools web-development networking go cross-platform cli acme letsencrypt tls-certificates certificate-management dns-challenge https rfc8555 docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="go-acme/lego")