ACME 客户端

最近更新： January 22, 2025
所有文档

最近更新：Jun 2, 2026 | 所有文档

Let’s Encrypt 使用 ACME 协议来验证您对给定域名的控制权并向您颁发证书。要获得 Let’s Encrypt 证书，您需要选择一个要使用的 ACME 客户端软件。

下列 ACME 客户端由第三方提供。 Let’s Encrypt 不控制或审查第三方客户端，也不能保证其安全性或可靠性。

您也可以使用某些浏览器（网页版）ACME 客户端，但我们不会在此列出这些客户端，因为它们会鼓励您手动进行续期，从而导致用户体验不佳并增加错过续期的风险。

推荐客户端：Certbot

我们建议大多数人从 Certbot 客户端开始。它既可以只为您获取证书，也可以帮助您获取并安装证书。它易于使用，适用于许多操作系统，并且具有出色的文档。

如果 Certbot 不能满足您的需求，或者您只是想尝试其他软件，那么下面有更多的客户端可供选择，这些客户端按照编写所用的语言或是使用环境排序。

其他客户端

下列客户端均支持 ACMEv2 API (RFC 8555)。 2021 年 6 月起我们已彻底废除 ACMEv1。如果您使用的客户端在该列表中，请确保您将其升级到最新版本。如果下面没有列出您正在使用的客户端，则该客户端有几率不支持ACMEv2 API，请与项目维护者联系或更换其他客户端。

Bash

GetSSL (bash, also automates certs on remote hosts via ssh)
acme.sh (Compatible to bash, dash and sh)
dehydrated (Compatible to bash and zsh)
ght-acme.sh (batch update of http-01 and dns-01 challenges is available)
bacme (simple yet complete scripting of certificate generation)

C

OpenBSD acme-client
uacme
acme-client-portable
Apache httpd Support via the module mod_md.
mod_md Separate, more frequent releases of the Apache module.
CycloneACME (client implementation of ACME dedicated to microcontrollers)

C++

acme-lw
esp32-acme-client allows IoT devices to get certificates

Clojure

certificaat

Configuration management tools

Ansible acme_certificate module
Ansible collection: acme (ACME V2 integration with acme_certificate module. Supports multiple providers for challenges)
Pulumi ACME Provider
Terraform ACME Provider

D

acme-lw-d

Domino

CertMatica (ACME certificate installation and renewals for HCL Domino™ servers)
HCL Domino (Full ACME V2 flow integration for HCL Domino™ servers)

Docker

Crypt::LE
acme.sh
letsproxy
docker-nginx
docker-openresty
Certimate manage certificates for multiple platforms with a visual workflow

Go

Caddy
Lego
Lets-proxy2 (Reverse proxy to handle https/tls)
autocert
Traefik
ACMEz
Step CLI
J8a (Reverse proxy for JSON APIs with auto-renewing TLS 1.3)
certmanager (Supports certificate sharing across instances/pods and split-horizon DNS with acme-proxy)
Cert Warden (Server to centrally manage and serve certificates)
Certimate manage certificates for multiple platforms with a visual workflow

Java

Kubernetes

Lua

Mako Server's ACME Plugin The plugin’s main objective is to provide certificates for servers on private networks.

Microsoft Azure

App Service Acmebot (Compatible to Azure Web Apps / Functions / Web App for Containers)
Key Vault Acmebot (Works with Azure Key Vault Certificates)
Az-Acme (The simplest ACME Issuer for Azure Key Vault)

nginx

njs-acme JavaScript library compatible with the ’ngx_http_js_module’ runtime (NJS), allows for the automatic issue of TLS/SSL certificates for NGINX without restarts
Angie ACME module built-in module for Angie server, no extra dependencies, simple configuration, reload-less auto retrieval
ngx_http_acme_module built-in ACME module from upstream nginx developers
acme-nginx
docker-openresty An Openresty image with auto ssl, using acme.sh
docker-nginx An Nginx image with auto ssl, using acme.sh
lua-resty-acme

Node.js

acme-bot
Server-SSL.js (Easy to configure SSL Web Server for development or production)
Auto Encrypt Automatically provisions and renews TLS certificates from Let’s Encrypt on Node.js https servers

OpenShift

certman-operator

Perl

acme (Simple json config, autogen keys, issue cert, refresh cert, apache/nginx integration)
Crypt::LE

PHP

Python

ACME Tiny
acmebot
sewer
acme-dns-tiny (Python 3)
Automatoes ACME V2 ManuaLE replacement with new features
acertmgr
acme-cert-tool
acmetk acmetk is an ACMEv2 proxy to centralize certificate requests and challenges within an organisation and direct them using a single account to Let’s Encrypt or other ACMEv2 capable CA’s.

Ruby

unixcharles/acme-client

Rust

ACMEd
acme-redirect
renewc Easy certificate tool: helpful diagnostics, no requirements, no installation needed
acme-client-rs Single-binary CLI client (RFC 8555) with EAB, ARI (RFC 9773), IP identifiers (RFC 8738), and certificate profiles; experimental DNS-PERSIST-01 support

Windows / IIS

Crypt::LE (previously ZeroSSL project)
win-acme (.NET)
Posh-ACME (PowerShell)
ACME-PS (PowerShell)
kelunik/acme-client (PHP)
Certify The Web (Windows)
WinCertes Windows client
GetCert2 (simple GUI - .Net, C#, WPF, WCF)
TekCERT (GUI, CLI)
simple-acme Spiritual successor to win-acme, also works on Linux!

Server

Certera (Crossplatform PKI to centrally manage keys and certificates)
CertKit Deployable and SaaS certificate lifecycle management and monitoring

库

4D

acme component ACME Client v2 for 4D v18+

C++

acme-lw
esp32-acme-client allows IoT devices to get certificates

D

acme-lw-d

Delphi

DelphiACME (Embarcadero Delphi)

Go

Lego
eggsampler/acme
ACMEz
certmanager (Supports certificate sharing across instances/pods and split-horizon DNS with acme-proxy)

Java

ACME4J

.NET

Node.js

publishlab/node-acme-client
Auto Encrypt Automatically provisions and renews TLS certificates from Let’s Encrypt on Node.js https servers

Perl

acme (Simple json config, autogen keys, issue cert, refresh cert, apache/nginx integration)
Crypt::LE
Net::ACME2

PHP

Python

Python 模块acme 是 Certbot 的一部分，但它也被许多其他客户端使用，并在 PyPI、Debian、Ubuntu、Fedora 和其他一些发行版中作为独立软件包提供。
txacme (Twisted client for Python 2 / 3)

Ruby

unixcharles/acme-client

Rust

instant-acme is an async, pure-Rust ACME (RFC 8555) client which relies on Tokio
rustls-acme provides TLS certificate management and serving using rustls
tokio-rustls-acme is an easy-to-use, async ACME client library for rustls

集成了 Let’s Encrypt 的项目

添加客户端/项目

如果您发现某些 ACME 客户端或项目已经集成了 Let’s Encrypt 的 ACMEv2 接口，但本页面尚未列出，请在我们网站的 GitHub 代码仓库中更新 data/clients.json 文件，并发起 Pull Request。

在发起 Pull Request 之前，请确保：

该客户端尊重 Let’s Encrypt 商标政策。
该客户端不是基于浏览器使用的，并且支持自动续期。
该客户端的自动续期时间点是随机的，或鼓励按这种方式配置。
您在修改代码时将该客户端添加至相关列表的末尾。
您的提交更新了 clients.json 顶部的 lastmod 日期戳。

我们可能会定期移除停止维护的客户端或项目。如果将来开发进程恢复，欢迎再次发起 Pull Request 重新将该项目加入列表中。