acme.sh
6.1#13 in certificate management softwareFree planFree planLinuxmacOSSelf-hostedWindows
Visitacme.sh vs Certify The Web
Certify The Web
7.7#2 in certificate management softwareFrom $59 a yearFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | acme.sh | Certify The Web |
|---|---|---|
| Certificate authorities | The README lists ZeroSSL as the default CA and also lists Let's Encrypt, SSL.com, Google Public CA, Actalis, Pebble strict mode, and any RFC8555-compliant CA as supported. | Supported authorities include Let's Encrypt, Google Trust Services, ZeroSSL, Actalis and private or enterprise ACME CAs. |
| Purpose | acme.sh is a Unix shell script ACME client for SSL/TLS certificate automation. | Certify The Web products request, deploy, and renew TLS certificates. |
| Security | Release tags from version 3.1.6 onward are signed with the maintainer's SSH key, while tags through 3.1.5 are unsigned. | Credentials are encrypted at rest; Certificate Manager uses Windows DPAPI or .NET key-based encryption, while Hub adds role-based access controls and scoped API authentication. |
acme.sh plans
- acme.shFree
Certify The Web plans
- Free evaluationFree
- Cloud Managed License$4.99 a month
- Certify Certificate Manager cloud managed license$4.99 a month
- Starter$59 a year
- Certify DNS (Standard)$60 a year
- Professional$149 a year
Pick acme.sh if…
acme.sh suits users who want a shell-based way to issue and renew certificates across listed Unix-like and Windows environments. It may fit administrators who can use automated validation methods or manage manual DNS updates themselves.
Pick Certify The Web if…
Certify The Web suits administrators managing TLS certificates on Windows, Linux, or macOS systems. The Hub is relevant to teams coordinating multiple instances centrally.