acme.sh

all

Shell script implementing ACME client protocol, an alternative to `certbot`. See also: `acme.sh dns`.

More info →

Subcommands (1)

acme.sh --dns

Use a DNS-01 challenge to issue a TLS certificate.

→

Options (3)

-d, --domainboolean

Issue a certificate using webroot mode

Example: acme.sh --issue {{[-d|--domain]}} {{example.com}} {{[-w|--webroot]}} /{{path/to/webroot}}

-w, --webrootboolean

Issue a certificate using webroot mode

Example: acme.sh --issue {{[-d|--domain]}} {{example.com}} {{[-w|--webroot]}} /{{path/to/webroot}}

-i, --install-certboolean

Install certificate files into the specified locations (useful for automatic certificate renewal)

Example:

acme.sh {{[-i|--install-cert]}} {{[-d|--domain]}} {{example.com}} --key-file /{{path/to/example.com.key}} --fullchain-file /{{path/to/example.com.cer}} --reloadcmd "{{systemctl force-reload nginx}}"

Examples (7)

Issue a certificate using webroot mode

acme.sh --issue [-d|--domain] example.com [-w|--webroot] /path/to/webroot

Issue a certificate for multiple domains using standalone mode using port 80

acme.sh --issue --standalone [-d|--domain] example.com [-d|--domain] www.example.com

Issue a certificate using standalone TLS mode using port 443

acme.sh --issue --alpn [-d|--domain] example.com

Issue a certificate using a working `nginx` configuration

acme.sh --issue --nginx [-d|--domain] example.com

Issue a certificate using a working Apache configuration

acme.sh --issue --apache [-d|--domain] example.com

Issue a wildcard (\*) certificate using an automatic DNS API mode

acme.sh --issue --dns dns_cf [-d|--domain] *.example.com

Install certificate files into the specified locations (useful for automatic certificate renewal)

acme.sh [-i|--install-cert] [-d|--domain] example.com --key-file /path/to/example.com.key --fullchain-file /path/to/example.com.cer --reloadcmd "systemctl force-reload nginx"

made by @shridhargupta | data from tldr-pages