otty / apps
All apps/acme.sh

acme.sh

acme-sh

A pure Unix shell script ACME client for SSL / TLS certificate automation.

Runs as acme.sh|macOS, Linux, Windows|github.com
Open form in Otty otty.toml

Command form

ai-draft · 3 tasks · 15 fields

Issue or renew an ACME certificate for one or more domains with webroot, standalone, Apache or DNS validation. Install-cert, deploy and account management are left out.

Opens the form; the finished command lands at your prompt, unrun
Run in Otty
otty gui acme-sh
Issue a certificateExample values, fixed in this page — nothing here reaches a terminal
Basic
Issue certificate*
--issue
Domains*
string
Web root*
directory
Key length
string
TasksEach one presets the form for one job
Issue with webroot
issuedomainwebrootkeylength
Issue with DNS API
issuedomaindns_hookkeylength
Renew a domain
renewdomainforce
ParametersOnly these flags are editable in the form
Issue certificate
boolean
--issue
Renew certificate
boolean
--renew
Domains
One entry per domain; the first is the primary name.
string · repeatable
--domain-d
Web root
path
--webroot-w
Standalone mode
boolean
--standalone
Apache mode
boolean
--apache
DNS API hook
For example dns_cf; use the DNS API for validation.
string
--dns
Key length
string
--keylength-k20484096ec-256ec-384
ACME server
string
--serverletsencryptzerossl
Use staging server
boolean
--staging
Force
boolean
--force-f
Copy cert to
path
--cert-file
Copy key to
path
--key-file
Copy fullchain to
path
--fullchain-file
Reload command
string
--reloadcmd
SourcesEvery flag above is checked against these
help
--issue Issue a cert. -r, --renew Renew a cert. -d, --domain <domain.tld> Specifies a domain, used to issue, renew or revoke etc. -f, --force Force install, force cert renewal or override sudo restrictions. --staging, --test Use staging server, for testing. --debug [0|1|2…
helpmaster 2026-10

github.com

Before it fills your prompt, Otty checks the installed acme.sh against its version. A form that does not match your version is not offered.