Compatible with internal

Certbot

Certbot interoperability is a first-class integration. sslcertificates.io publishes an ACME directory, account and EAB credentials, and a documented certbot certonly --server <directory> --eab-kid --eab-hmac-key --dns or --webroot. Contract tests replay RFC 8555 directory, newAccount, newOrder and revoke against a mock ACME server that matches the platform protocol. Live client runs need a disposable hostname.

Verification: test_verified. Connection: unknown. Credentials: none. Live E2E: no.

Platform ACME production is disabled; live client interop needs a disposable hostname and operator-enabled staging ACME endpoint.

What sslcertificates.io can do

Required permissions

Point the client at the sslcertificates.io ACME directory. EAB is required when the organization ACME credential is issued.

Setup

Open Dashboard → Integrations → Certbot. Enter the credentials described on this page. Values are encrypted at rest and never shown again. Run Test connection. Discovery runs only after authentication succeeds. Select a discovered resource. Do not paste opaque IDs unless the provider cannot enumerate them. Perform the certificate or notification action, then confirm the external system matches. Disconnect removes stored credentials and owned test resources created by sslcertificates.io.

Known limitations

Production ACME on sslcertificates.io stays off until an operator enables it. Interop tests use the platform ACME staging directory or a mock directory.

Official sources

Fact checked 2026-09-20. https://datatracker.ietf.org/doc/html/rfc8555 Certbot is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.

Capabilities

directory eab http-01 dns-01 renew

Connect

Create an account to connect

Certbot is a trademark of its owner. sslcertificates.io is not a partner or certified reseller unless a written agreement exists.