win-acme
win-acme is a free, open-source ACMEv2 client for Windows that obtains certificates from Let’s Encrypt and other ACME services.
What win-acme is
win-acme is a free, open-source ACMEv2 client for Windows that obtains certificates from Let’s Encrypt and other ACME services. A simple interface creates and installs certificates on a local IIS server; an advanced interface covers other setups, including Apache and Exchange. The program schedules a daily check for certificates that may need renewal. It supports wildcard and international-name certificates, plus the optional OCSP Must Staple extension. Validation options include DNS, HTTP, and TLS, with examples such as acme-dns, Azure, Route53, and Cloudflare. Certificates can be stored in Windows, the IIS Central Store, PEM or PFX files, or KeyVault. Listed providers include Let’s Encrypt, ZeroSSL, DigiCert, Sectigo, Buypass, and Keyon. Automation options include unattended command-line use, JSON configuration, PowerShell, and custom C# plugins. Sensitive configuration and cached private keys are protected by default. The current program depends on .NET 7 and officially supports Windows Server 2016 or later. Community support is available through GitHub issues; professional support is associated with sponsoring a core developer.
Good
- Free and open source.
- Scheduled daily renewal checks.
- Supports multiple validation methods and certificate stores.
- Offers command-line, PowerShell, and plugin automation.
Watch out
- Current version depends on .NET 7.
- Official support starts at Windows Server 2016.
- Community support is through GitHub issues.
Who it suits
It suits Windows users who need certificates for IIS and those managing more advanced setups such as Apache or Exchange. Its automation options also fit unattended certificate management.
Verdict
win-acme combines certificate setup, renewal checks, and automation for Windows environments. Check its .NET and Windows Server requirements before choosing it.
Plans and prices
From win-acme's own pricing page, checked 10 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| win-acme | Free | ACMEv2 client for Windows · community support; professional support available through sponsorship |
The facts
Each one read from win-acme's own pages, with the date it was checked.
What it does
- ACME providers
- The site lists compatibility with Let’s Encrypt, ZeroSSL, DigiCert, Sectigo, Buypass and Keyon.checked 10 Oct 2026
- Automation
- The program supports unattended command-line operation, JSON-file configuration, PowerShell scripts and custom plugins written in C#.checked 10 Oct 2026
- Certificate setup
- Its simple interface creates and installs certificates on a local IIS server, with an advanced interface for other use cases including Apache and Exchange.checked 10 Oct 2026
- Certificate storage
- Certificates can be stored in Windows, the IIS Central Store, PEM files, PFX files or KeyVault.checked 10 Oct 2026
- Certificate types
- It can obtain wildcard and international-name certificates, and supports the optional OCSP Must Staple extension.checked 10 Oct 2026
- Intended users
- The site describes the program as suitable for simple local IIS certificate setup and says it can grow to cover more advanced scenarios.checked 10 Oct 2026
- Private-key protection
- The site says cached private keys are encrypted and protected by filesystem access control lists by default.checked 10 Oct 2026
- Renewals
- The program creates a scheduled task that checks daily whether certificates need renewal.checked 10 Oct 2026
- Security
- Encryption of sensitive configuration information using Microsoft Data Protection API is enabled by default and can be turned off.checked 10 Oct 2026
- Support
- Community support is provided through GitHub issues, while guaranteed future professional support is offered in connection with sponsoring a core developer.checked 10 Oct 2026
- System requirements
- The site says the current program depends on .NET 7 and officially supported Windows Server 2016 or higher; older releases may work on older Windows versions but are unsupported.checked 10 Oct 2026
- Validation integrations
- Its validation toolkit includes DNS, HTTP and TLS options, with examples including acme-dns, Azure, Route53 and Cloudflare.checked 10 Oct 2026
- What it does
- win-acme is an ACMEv2 client for Windows for obtaining certificates from Let’s Encrypt and other ACME services.checked 10 Oct 2026
The company
- Headquarters
- Austriachecked 28 Sep 2026
Alternatives to win-acme
- 1
EJBCA
Free planOpen sourceWebAPILinuxmacOS8.2From £62,065 a year - 2
Certify The Web
Free planWebAPILinuxmacOS7.7From $59 a year - 3
KeyTalk CKMS
AndroidiOSWebAPI7.7From €5 a month - 4
Let's Encrypt
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 5
ManageEngine Key Manager Plus
Free planWebAPILinuxSelf-hosted7.6From $475 a year - 6
GeoTrust
Free planWebAPILinuxWindows6.9From $2 a month