14 Server
neil edited this page 2022-03-31 10:30:49 +08:00

For the --server parameter, you can specify an ACME server directory URL, and you can also give a short friendly name for known CAs.

The supported short names are:

Short Name ACME server URL Usage Wiki
letsencrypt https://acme-v02.api.letsencrypt.org/directory N/A
letsencrypt_test https://acme-staging-v02.api.letsencrypt.org/directory N/A
buypass https://api.buypass.com/acme/directory BuyPass.com CA
buypass_test https://api.test4.buypass.no/acme/directory BuyPass.com CA
zerossl https://acme.zerossl.com/v2/DV90 ZeroSSL.com CA
sslcom https://acme.ssl.com/sslcom-dv-rsa, https://acme.ssl.com/sslcom-dv-ecc SSL.com CA
google https://dv.acme-v02.api.pki.goog/directory Google Public CA
googletest https://dv.acme-v02.test-api.pki.goog/directory Google Public CA

The short name will be treated as the same as the URL:

The following usages have the same meaning:

acme.sh --issue ....   --server  zerossl

-or-

acme.sh --issue ....   --server  https://acme.zerossl.com/v2/DV90

For now, the default CA is zerossl. If you want to use another CA, you need to specify --server for each command.

For example, if your want to use letsencrypt CA :

acme.sh  --register-account  --server letsencrypt  -m  myemail@example.com

--or--

acme.sh  --issue --server letsencrypt  -d  example.com  --dns dns_cf

There is a way to change the default CA:

acme.sh  --set-default-ca  --server letsencrypt

From now on, you will issue cert from letsencrypt if you don't specify any --server parameter.

acme.sh --issue  -d example.com  --dns dns_cf