acme.sh
6.1#13 in certificate management softwareFree planFree planLinuxmacOSSelf-hostedWindows
Visit
| Fact | acme.sh | KeyTalk CKMS |
|---|---|---|
| Certificate authorities | The README lists ZeroSSL as the default CA and also lists Let's Encrypt, SSL.com, Google Public CA, Actalis, Pebble strict mode, and any RFC8555-compliant CA as supported. | The system supports multiple public and private CAs, including Microsoft AD CS, GlobalSign and DigiCert QuoVadis. |
| Support | The README directs users to the project's GitHub Issues and Pull Requests for discussion and contributions. | KeyTalk says it offers customers 24/7 support. |
acme.sh suits users who want a shell-based way to issue and renew certificates across listed Unix-like and Windows environments. It may fit administrators who can use automated validation methods or manage manual DNS updates themselves.
It suits businesses and managed service providers that need to manage certificates across their own infrastructure or customer environments. The S/MIME options may suit organizations seeking either on-premise or hosted service.