Lego

ACME client and ACME library written in Go.

[!INFO] Important lego is an independent, free, and open-source project, if you value it, consider supporting it! ❤️

Features

{{< cards >}}

{{% card title="Challenges" href="obtain" %}}

• DNS-01
• HTTP-01
• TLS-ALPN-01
• DNS-PERSIST-01 {{% /card %}}

{{% card title="ACME servers" href="advanced/caservers" %}} Multiple ACME servers support (Let's Encrypt, ZeroSSL, etc.) {{% /card %}}

{{% card title="Certificate Management" href="obtain" %}} Obtain, renew, revoke.

Wildcard and SAN certificate support. {{% /card %}}

{{% card title="DNS providers" href="dns" %}} Comes with the support of more than 200 DNS providers {{% /card %}}

{{% card title="CNAME" href="advanced/options/#lego_disable_cname_support" %}} Supported by default. {{% /card %}}

{{< /cards >}}

Supported RFCs

RFC	Description
RFC 8555	Automatic Certificate Management Environment (ACME).
RFC 8737	TLS Application‑Layer Protocol Negotiation (ALPN) Challenge Extension.
RFC 8738	IP Identifier Validation Extension. Issues certificates for IP addresses.
RFC 9773	Renewal Information (ARI) Extension.
draft-ietf-acme-profiles-01	Profiles Extension.
draft-ietf-acme-dns-persist-01	Challenge for Persistent DNS TXT Record Validation.

Supporting lego

Special thanks to the organizations sponsoring lego's development.

---

[!IMPORTANT] Info You are an organization and want to support lego? We have a dedicated sponsorship page for you.

---