ACME SSL certificate automation

ACME Certificates for Automated SSL Management

Simplify SSL certificate issuance and renewal with Sectigo ACME certificates. Choose DV or OV validation with single-domain, SAN or wildcard coverage, and let a configured ACME client handle recurring certificate requests and renewals across your websites and services.

Sectigo DV & OV optionsAutomated certificate requestsCompatible client workflows
Brand Sectigo Sectigo
Product Name

Sectigo ACME Certificate - DV

Sectigo ACME Certificate - OV

Price €17.20/yr. €77.40/yr.
License 3 years 3 years
Buy / Renew Buy Now Buy Now
Validation Domain Validation (DV) Organization Validation (OV)
Issuance Time Within minutes 1–3 business days
Certificate Lifetime Up to 90 days, auto-renewed Up to 90 days, auto-renewed
Company Name in Certificate - Yes
Warranty USD $500,000 USD $1,000,000
Wildcard Support Yes Yes
Multi-Domain (SAN) Yes Yes
External Account Binding (EAB) Yes Yes
Unlimited Reissue Yes Yes
Key Types RSA 2048-bit or higher / ECDSA P-256 or P-384 RSA 2048-bit or higher / ECDSA P-256 or P-384
Refund 30-Day Refund 30-Day Refund
What is an ACME Certificate

What is an ACME Certificate?

An ACME certificate is an SSL/TLS certificate issued and renewed using the Automatic Certificate Management Environment (ACME) protocol. The protocol defines how an ACME client communicates with a certificate authority; the certificate enables your website or service to establish secure TLS connections.

The client handles certificate requests, domain-control checks and retrieval. A supported integration can also automate installation on your server.

Key Features of ACME Certificates

Manage SSL at scale with ACME certificate automation, SAN and wildcard coverage, and unlimited server licensing.
Automated Certificate Renewal

Automated Certificate Renewal

A configured ACME client requests replacement certificates before expiry, reducing manual renewal work and helping prevent missed certificate deadlines.

Ready for Short Certificate Lifetimes

Ready for Short Certificate Lifetimes

Manage more frequent certificate replacements with a repeatable ACME workflow, reducing recurring administration as certificate lifetimes become shorter.

Unlimited Issuance During Your Term

Unlimited Certificate Issuance

Issue, renew or replace certificates for subscribed domains throughout your active subscription, with no separate issuance fees for each new certificate.

Automation Across Your Servers

Automation Across Your Servers

Connect compatible ACME clients across your servers to automate certificate requests and renewals for subscribed domains, without additional server-license fees.

Single, SAN & Wildcard Coverage

Single, SAN & Wildcard Coverage

Choose coverage for individual hostnames, multiple domains or wildcard entries to suit your deployment. Wildcard issuance requires DNS-01 validation.

Certificates Issued by Sectigo

Certificates Issued by Sectigo

Get publicly trusted SSL/TLS certificates from Sectigo through ACME, with DV and OV options to match the identity verification your websites and services need.

How ACME Certificate Automation Works

ACME SSL certificate setup – from subscription and client registration to automated renewal.

Order ACME Certificate

Buy ACME SSL Certificate – choose DV or OV, add your domains and receive EAB credentials for client registration.

Register ACME Client

Configure a compatible EAB-capable client with the supplied Sectigo directory URL and account credentials. Use the endpoint for your validation level.

Validate Your Domains

Configure HTTP-01 or DNS-01 so your ACME client can complete domain-control checks when required. Verify validation access before requesting certificates.

Issue & Install

The client submits a CSR and retrieves the certificate. Configure and test installation of the certificate and chain, including any required service reload.

Renew Automatically

Once configured, the ACME client automatically renews and installs certificates before expiry throughout the active subscription term.

Why Shorter Certificate Lifetimes Make ACME More Valuable

The CA/Browser Forum’s approved schedule progressively shortens the maximum validity of newly issued publicly trusted TLS certificates.

2025
Until Mar 2026
398 days

About one renewal a year

2026
Mar 15, 2026
200 days

Two renewals a year

2027
Mar 15, 2027
100 days

Four renewals a year

2029
Mar 15, 2029
47 days

Eight or more renewals a year

As certificate lifetimes shorten, requests, validation and installation become more frequent. A configured ACME workflow handles these recurring tasks across your domains and servers, reducing manual work and helping your team keep certificate replacements on schedule.

Sectigo ACME certificates are valid for up to 90 days per issuance. During an active subscription, your configured client automatically requests replacements before expiry and installs them through a supported integration, reducing the need for repeated manual deployment.

Certificate renewal and subscription renewal are separate. The ACME client replaces certificates automatically; keep your subscription active to continue receiving new certificates.

ACME SSL vs. Manually Renewed SSL Certificates

ACME Automation Manual Certificate Management
Issuance Client generates keys and CSR, answers the challenge and downloads the certificate Manually generate a CSR, complete validation and download the certificate
Installation Installed by the client or a deploy hook Copied and configured on every server
Renewal Automatic, before expiry Repeat the entire process each cycle
Short-lifetime readiness Repeatable renewal workflow; settings must remain suitable for the issued lifetime Workload grows with every reduction
Scaling to many domains Add authorized domains and configure validation and deployment Manual tasks increase across domains and servers
Outage risk Can reduce missed-renewal risk when monitored Depends on tracking and execution; missed expiry can interrupt HTTPS
Best for DevOps, hosting providers, SaaS, any team with more than a handful of sites Small deployments with manageable manual renewal needs

DV or OV: Which ACME Certificate Do You Need?

Both support ACME enrollment and renewal. Choose the validation level based on the identity your certificate needs to establish.

Choose Sectigo ACME DV if…

  • Domain-control verification meets your certificate requirements
  • Your certificate policy permits domain-validated SSL
  • You need issuance without organization pre-validation
  • You want a lower-cost subscription for domain authentication

Buy ACME DV – €17.20/yr

Choose Sectigo ACME OV if…

  • Verified legal organization details must appear in the certificate
  • Internal policy or procurement requires organization validation
  • Partners or security reviewers need to inspect your organization identity
  • You need automated issuance linked to a pre-validated organization

Buy ACME OV – €77.40/yr

ACME Client Compatibility Across Server Environments

Use an ACME v2 client with EAB support, a compatible validation method and the installation integration your environment needs.

Certbot Linux, Apache & NGINX plugins
acme.sh Pure shell, 150+ DNS APIs
win-acme (WACS) Windows Server & IIS
Certify The Web Windows GUI client
Posh-ACME PowerShell automation
cert-manager Kubernetes & OpenShift
lego Go-based CLI & library
dehydrated Lightweight Bash client

For proxies, control panels, containers and cloud environments, confirm support for custom ACME endpoints, EAB registration and automated certificate installation before deployment.

ACME Certificate Setup Assistance

Get help choosing DV or OV, planning domain coverage and connecting your ACME client with EAB credentials.

Cheap SSL shop Assurance

Lowest Price Challenge

Lowest Price Guarantee

30 Days Cancellation

Money-Back
Policy

Free Cost Tech Support

24/7 Free Tech Support

Authorized Reseller

Global Authorized Distributor

ACME Certificate – Frequently Asked Questions

What is an ACME certificate?

An ACME certificate is an SSL/TLS certificate obtained through the Automatic Certificate Management Environment (ACME) protocol. ACME enables software to request certificates and complete domain-control checks with a certificate authority. With a configured client, it also supports automated renewal, reducing recurring manual certificate work.

What is an ACME client?

An ACME client is the software that communicates with your certificate authority to obtain and renew certificates. Options include Certbot, acme.sh, win-acme and cert-manager. Choose one that supports your server environment, validation method and certificate installation requirements. Sectigo’s service also requires External Account Binding (EAB) support.

Which validation levels are available with ACME certificates?

CheapSSLShop offers Sectigo ACME certificates with Domain Validation (DV) or Organization Validation (OV). DV establishes control of the domain, while OV also verifies the organization identified in the certificate. Choose according to your identity-verification requirements; both options support automated certificate enrollment and renewal.

Are wildcard and multi-domain certificates available with ACME?

Yes. ACME can support certificates for individual names, multiple domains through Subject Alternative Names (SANs), and wildcard subdomains, depending on the offering. Wildcard names require DNS-01 validation. For a certificate containing several names, each name must meet the certificate authority’s applicable validation requirements.

How long is an ACME certificate valid?

Validity depends on the issuing certificate authority and its certificate offering. ACME supports certificates with different lifetimes, and the client requests replacements before they expire. When comparing options, check both the validity of each issued certificate and the duration of the paid subscription.

How does ACME certificate renewal work?

The client checks when a certificate needs replacement and requests a new one according to its renewal settings and the CA’s guidance. It completes domain validation when required, then retrieves the certificate. A supported installation integration deploys the replacement and performs any necessary service reload. Monitor the process for failures.

Can ACME certificates secure internal servers?

Yes. An internal service can use a publicly trusted certificate for a name under a publicly registered domain, such as portal.example.com. DNS-01 can establish domain control without exposing the service to the internet. Private-only names, such as server.local, require a different certificate approach, typically a private CA.

Does Sectigo support ACME?

Yes. Sectigo provides ACME certificate services through its Certificate-as-a-Service (CaaS) platform. CheapSSLShop offers Sectigo ACME DV and OV subscriptions, allowing you to select domain coverage and the identity-validation level your deployment requires.

How is ACME certificate pricing calculated?

At CheapSSLShop, Sectigo ACME Certificate – DV starts at €17.20/yr per domain, while Sectigo ACME Certificate – OV starts at €77.40/yr per domain. Your total depends on the standard and wildcard domains selected and the subscription term. Compare both options above for coverage and pricing.

Do I need technical skills to use ACME?

Initial setup requires access to your server or hosting platform and a way to prove domain control. Some clients provide guided interfaces; others use command-line configuration. Once validation, installation and renewal are configured, routine certificate replacement can run automatically. CheapSSLShop support can assist with product selection and setup questions.

4.8/5 star
overall satisfaction rating
4812 reviews
from actual customers at
review
Star
Always easy to order from here. I'm hoping by renewing, I won't need up upload a new certificate.
Traci L B
review
Star
shopping went well, I worry about support. Although I see good reviews. So looking forward to positive experience.
Kamran
review
Star
Não encontrri informação sobre o valor da renovação do certificado, e o chat dificulta pois pede um numero de pedido, mas resolvi arriscar.
Almir L