snippetbashTip

acme.sh — Shell script implementing ACME client protocol, an alternative to `certbot`. See also: `acme.sh dns`

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

shellcommandclientacmeacme.shcliimplementingscript

Problem

How to use the acme.sh command: Shell script implementing ACME client protocol, an alternative to certbot. See also: acme.sh dns. More information: <https://github.com/acmesh-official/acme.sh#2-just-issue-a-cert>.

Solution

acme.sh — Shell script implementing ACME client protocol, an alternative to certbot. See also: acme.sh dns. More information: <https://github.com/acmesh-official/acme.sh#2-just-issue-a-cert>.

Issue a certificate using webroot mode:

acme.sh --issue {{[-d|--domain]}} {{example.com}} {{[-w|--webroot]}} /{{path/to/webroot}}

Issue a certificate for multiple domains using standalone mode using port 80:

acme.sh --issue --standalone {{[-d|--domain]}} {{example.com}} {{[-d|--domain]}} {{www.example.com}}

Issue a certificate using standalone TLS mode using port 443:

acme.sh --issue --alpn {{[-d|--domain]}} {{example.com}}

Issue a certificate using a working nginx configuration:

acme.sh --issue --nginx {{[-d|--domain]}} {{example.com}}

Issue a certificate using a working Apache configuration:

acme.sh --issue --apache {{[-d|--domain]}} {{example.com}}

Issue a wildcard (\*) certificate using an automatic DNS API mode:

acme.sh --issue --dns {{dns_cf}} {{[-d|--domain]}} {{*.example.com}}

Install certificate files into the specified locations (useful for automatic certificate renewal):

acme.sh {{[-i|--install-cert]}} {{[-d|--domain]}} {{example.com}} --key-file /{{path/to/example.com.key}} --fullchain-file /{{path/to/example.com.cer}} --reloadcmd "{{systemctl force-reload nginx}}"

Code Snippets

Issue a certificate using webroot mode

acme.sh --issue {{[-d|--domain]}} {{example.com}} {{[-w|--webroot]}} /{{path/to/webroot}}

Issue a certificate for multiple domains using standalone mode using port 80

acme.sh --issue --standalone {{[-d|--domain]}} {{example.com}} {{[-d|--domain]}} {{www.example.com}}

Issue a certificate using standalone TLS mode using port 443

acme.sh --issue --alpn {{[-d|--domain]}} {{example.com}}

Issue a certificate using a working `nginx` configuration

acme.sh --issue --nginx {{[-d|--domain]}} {{example.com}}

Issue a certificate using a working Apache configuration

acme.sh --issue --apache {{[-d|--domain]}} {{example.com}}

Context

tldr-pages: common/acme.sh

Revisions (0)

No revisions yet.