Overview

The Sectigo Preconfigured ACME client ("the client" or spacme) is a config-driven ACME client, for customers of Sectigo’s Certificates as a Service (CaaS), designed to support multiple ACME servers with proper External Account Binding (EAB) handling. It is built on top of the powerful Lego library, allowing automatic DNS01 validation for over 150 DNS providers. The client offers an intuitive and scalable config structure which suits both simple and complex setups.

The Sectigo Preconfigured ACME client lets you perform the following tasks:

  • Issue certificates via config file that support:

    • One or more certificates

    • One or more ACME server + EAB combinations

    • One or more DNS providers

    • Reusable ACME and DNS config blocks, env variable substitution, and more

  • On-demand renewal based on:

    • Expiration threshold

    • Key type/size changes

    • SAN domains changes

    • Revocation status

    • ACME account changes (e.g EAB values, contact_email)

  • Integration with schedulers (crontab and Task Scheduler) to ease auto-renewal setup

  • Revocation

Additional resources