About Certbot
Certbot is a command-line tool from the Electronic Frontier Foundation for obtaining TLS certificates from Let's Encrypt and, optionally, switching on HTTPS for your web server. It is written in Python and is a common client for automated certificate issuance.
Beyond Let's Encrypt, Certbot can act as a client for any other certificate authority that supports the ACME protocol, which makes it usable in setups that rely on a different issuer. The repository's topics point to ACME client functionality, certificate management and Let's Encrypt integration. Check the project documentation for supported web servers, plugins and renewal options.
Key features
- Obtains certificates from Let's Encrypt
- Optionally enables HTTPS on your server
- Works with any ACME-compatible certificate authority
- Command-line client written in Python
Good fit for
- →Free TLS certificates for web servers
- Built with
- Python
- Tags
- certbot
- letsencrypt
- acme
- tls
- https
- certificates
- python
- eff
Certbot: questions and answers
- What is Certbot used for?
- Certbot is the Electronic Frontier Foundation's client for obtaining Let's Encrypt certificates and optionally enabling HTTPS on a server. It is a good fit for free TLS certificates for web servers.
- Is Certbot open source?
- Yes. Certbot is open source under a custom licence. Its source code is on GitHub at certbot/certbot and is written mainly in Python.
- Is Certbot free?
- Yes. Certbot is open source, so the software itself is free to use under the terms of its own licence.
- What is Certbot an alternative to?
- Certbot is an open-source alternative to DigiCert, Sectigo and GlobalSign. Other open-source alternatives to DigiCert include Lego, acme.sh and step-ca.
- Is Certbot actively maintained?
- Yes. The most recent commit to Certbot was on 2 October 2026, and the latest release is v5.8.0, published on 1 September 2026. The project has 33k stars on GitHub.
Open-source alternatives to Certbot
See all
Lego
Security
Let's Encrypt/ACME client and library written in Go
MITvs DigiCert★ 9.9k
acme.sh
Security
A pure Unix shell script ACME client for SSL / TLS certificate automation
GPL-3.0vs DigiCert★ 48k
step-ca
Security
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certi
Apache-2.0vs Entrust★ 8.9k
Certimate
Security
ssl tls https ssl-certificate ssl-certificates ssl-cert https-certificate https-certificat
MITvs Sectigo★ 9.3k
Certd
Security
开源SSL证书管理工具;全自动证书申请、更新、续期;通配符证书,泛域名证书申请;证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔;https证书,pfx证书,der证书,TLS证书
AGPL-3.0vs Sectigo★ 5k
AllinSSL
Security
AllinSSL 是一个集证书申请、管理、部署和监控于一体的SSL证书全生命周期管理工具。AllinSSL is an all-in-one SSL certificate lif
AGPL-3.0★ 3.6k
SaaS alternatives to Certbot
See all
DigiCert
Security
Certificate authority and digital trust provider for TLS and PKI
SaaS
Sectigo
Security
Certificate authority offering TLS certificates and certificate lifecycle management
SaaS
GlobalSign
Security
Certificate authority and digital identity provider
SaaS
Entrust
Security
Identity security provider with MFA, PKI, identity verification and payments security
SaaS
Keyfactor
Security
Machine identity and PKI management platform
SaaS
Akeyless
Security
SaaS secrets management and machine identity platform for apps and pipelines
SaaS
