Using ZeroSSL.com CA
See also: https://github.com/acmesh-official/acme.sh/wiki/Change-default-CA-to-ZeroSSL
ZeroSSL doesn't have staging and no production rate limit, you can issue unlimited SSL of 90 days.
Alternatively you can create account and grab your acme credentials faster on ZeroSSL and even manage issued SSL.
https://zerossl.com/letsencrypt-alternative/#acme
Note: From acme.sh v3.0.0, acme.sh is using Zerossl as default ca, you must register the account first(one-time) before you can issue new certs.
1. Register your account with an email address:
acme.sh --register-account -m [email protected] --server zerossl
If you already have an account at www.zerossl.com, you can also register your acme account with External Account Binding (EAB) credentials. 1. Generate your EAB credentials at: https://app.zerossl.com/developer 2. Register acme account: acme.sh --register-account --server zerossl \ --eab-kid xxxxxxxxxxxx \ --eab-hmac-key xxxxxxxxx
2. Done. You can use Zerossl.com with --server zerossl as normal now.
acme.sh --server zerossl \ --issue -d example.com \ --dns dns_cf
3. If you don't want to specify --server zerossl every time you issue a cert, you can set zerossl as the default CA:
acme.sh --set-default-ca --server zerossl
See: https://github.com/acmesh-official/acme.sh/wiki/Server
Then you can issue any cert from zerossl:
acme.sh --issue -d example.com --dns dns_cf
More details:
https://github.com/acmesh-official/acme.sh/wiki/How-to-issue-a-cert
