全球最大的免费 SSL证书的CA机构，十岁了Let’s Encrypt

最新推荐文章于 2025-10-17 17:54:44 发布

RR1335

最新推荐文章于 2025-10-17 17:54:44 发布

阅读量1.2k

点赞数 34

CC 4.0 BY-SA版权

分类专栏：工具软件文章标签： ssl 网络协议网络 CA认证 SSL证书

本文链接：https://blog.csdn.net/D1237890/article/details/153044284

工具软件专栏收录该内容

18 篇文章

订阅专栏

https://letsencrypt.org/docs/

Let’s Encrypt issues certificates through an automated API based on the ACME protocol.

In order to interact with the Let’s Encrypt API and get a certificate, a piece of software called an “ACME client” is required. No part of the process for getting a certificate happens on this website, which is merely informational.

The first question to answer for people who want to get started with Let’s Encrypt is: will my hosting provider get and manage certificates from Let’s Encrypt for me, or do I need to run an ACME client myself?

Let's Encrypt通过基于ACME协议的自动化API颁发证书。

要与Let's Encrypt API交互并获取证书，需要使用名为"ACME客户端"的软件。获取证书的流程完全不会在本网站进行，该网站仅提供信息参考。

对于想要使用Let's Encrypt的新用户，首要问题是：我的托管服务商会代我获取并管理Let's Encrypt证书，还是需要自行运行ACME客户端？

Getting certificates through your hosting provider

For many people, their hosting provider will get and manage certificates from Let’s Encrypt for them. If this is your situation, your provider is operating an ACME client and you don’t need to think about getting or operating ACME client software yourself.

If your provider gets and manages certificates for you, it will either happen automatically or there will be a configuration option that you will need to enable. Check your provider’s documentation and configuration options.

对许多人来说，他们的托管服务商会代为获取并管理来自Let's Encrypt的证书。如果您属于这种情况，说明您的服务商正在运行ACME客户端软件，您无需自行考虑获取或操作这类软件。

若您的服务商为您获取并管理证书，该过程可能是全自动的，也可能需要您启用某个配置选项。请查阅您服务商提供的文档说明和配置选项。

Selecting and operating an ACME client yourself

If your hosting provider does not handle getting and managing certificates for you, and if you have the ability to run commands on your server with sufficient privileges, you can select an ACME client and run it yourself to get certificates from Let’s Encrypt.

For most people we recommend the Certbot ACME client. The Certbot website has excellent documentation and instructions for operating Certbot.

There are many more options for ACME client software if for some reason Certbot does not meet your needs.

如果您的托管服务提供商不负责为您获取和管理证书，并且您有足够权限在服务器上运行命令，则可以自行选择ACME客户端，从Let’s Encrypt获取证书。

对于大多数人，我们推荐使用Certbot ACME客户端。Certbot网站提供了优秀的文档和操作指南。

如果Certbot无法满足您的需求，还有更多ACME客户端软件可供选择。

If your client needs to be configured with the Let’s Encrypt ACME API endpoint, it is:

https://acme-v02.api.letsencrypt.org/directory

We recommend running tests against our staging API first.

Getting Help

If you have questions about selecting an ACME client, or about using a particular client, or anything else related to Let’s Encrypt, please try our helpful community forums.

Our website also has extensive documentation if you need more details.