ACME v2 RFC 8555
- Support RFC 8737: TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension
- Support RFC 8738: certificates for IP addresses
- Support RFC 9773: Renewal Information (ARI) Extension
- Support draft-ietf-acme-profiles-00: Profiles Extension
- Support draft-ietf-acme-dns-persist-01: Challenge for Persistent DNS TXT Record Validation
Comes with more than 200 DNS providers
Register with CA
Obtain certificates, both from scratch or with an existing CSR
Renew certificates
Revoke certificates
Robust implementation of ACME challenges:
- HTTP (http-01)
- DNS (dns-01)
- TLS (tls-alpn-01)
SAN certificate support
CNAME support by default
Custom challenge solvers
Certificate bundling
OCSP helper function

Installation

How to install.

Usage

as a CLI
as a library

Documentation

Documentation is hosted live at https://go-acme.github.io/lego/.

DNS providers

Detailed documentation is available here.

If your DNS provider is not supported, please open an issue.

1cloud.ru	35.com/三五互联	51DNS	Abion
Active24	Akamai EdgeDNS	Alibaba Cloud DNS	AlibabaCloud ESA
all-inkl	Alwaysdata	Amazon Lightsail	Amazon Route 53
Anexia CloudDNS	ANS SafeDNS	ArtFiles	ArvanCloud
Aurora DNS	Autodns	Axelname	Azion
Azure DNS	Baidu Cloud	Beget.com	Binary Lane
Bindman	Bluecat	Bluecat v2	BookMyName
Bunny	Checkdomain	Civo	Cloud.ru
CloudDNS	Cloudflare	ClouDNS	ConoHa v2
ConoHa v3	Constellix	Core-Networks	CPanel/WHM
Curanet	Czechia	DanDomain	DDnss (DynDNS Service)
Derak Cloud	deSEC.io	Designate DNSaaS for Openstack	Digital Ocean
Dinahosting	DirectAdmin	DNS Made Easy	DNS Update (RFC2136)
dns.la	DNS.services	DNScale	DNSExit
dnsHome.de	DNSimple	Domain Offensive (do.de)	Domeneshop
DreamHost	Duck DNS	Dyn	DynDnsFree.de
Dynu	EasyDNS	EdgeCenter	Efficient IP
Epik	EuroDNS	EUserv	Excedo
Exoscale	External program	F5 XC	Fornex
freemyip.com	FusionLayer NameSurfer	G-Core	Gandi
Gandi Live DNS (v5)	Gehirn	Gigahost.no	Glesys
Gname	Go Daddy	Google Cloud	Gravity
Hetzner	Hosting.de	Hosting.nl	Hostinger
Hosttech	HTTP request	http.net	Huawei Cloud
Hurricane Electric DNS	HyperOne	IBM Cloud (SoftLayer)	IIJ DNS Platform Service
Infoblox	Infomaniak	Internet.bs	INWX
Ionos	Ionos Cloud	IPv64	ISPConfig 3
ISPConfig 3 - Dynamic DNS (DDNS) Module	JD Cloud	Joker	Joohoi's ACME-DNS
Katapult	KeyHelp	Leaseweb	Liara
Lima-City	Linode (v4)	Liquid Web	Loopia
LuaDNS	Mail-in-a-Box	ManageEngine CloudDNS	Manual
Metaname	Metaregistrar	mijn.host	Mittwald
myaddr.{tools,dev,io}	MyDNS.jp	MythicBeasts	Name.com
Namecheap	Namesilo	NearlyFreeSpeech.NET	NederHost
Neodigit	Netcup	Netlify	Netnod
Nicmanager	NIFCloud	Njalla	Nodion
NS1	Octenium	omg.lol	Online.net
Open Telekom Cloud	Oracle Cloud	OVH	plesk.com
PointDNS/PointHQ	Porkbun	PowerDNS	Rackspace
Rage4	Rain Yun/雨云	RcodeZero	reg.ru
Regfish	RimuHosting	RU CENTER	Sakura Cloud
Scaleway	ScanNet	Selectel	Selectel v2
SelfHost.(de\|eu)	Servercow	Shellrent	Simply.com
Sonic	Spaceship	Stackpath	Syse
Technitium	Tele3	Tencent Cloud DNS	Tencent EdgeOne
Timeweb Cloud	TodayNIC/时代互联	TransIP	UCloud
Ultradns	United-Domains	Variomedia	Veesp
VegaDNS	Vercel	Versio.[nl\|eu\|uk]	VinylDNS
Virtualname	VK Cloud	Volcano Engine/火山引擎	Vscale
Vultr	Wannafind	webnames.ca	webnames.ru
Websupport	WEDOS	West.cn/西部数码	Xinnet
Yandex 360	Yandex Cloud	Yandex PDD	Zilore
Zone.ee	ZoneEdit	Zonomi

If your DNS provider is not supported, please open an issue.