Skip to content
SPECIFICTION
Get listed

Certbot

certbot.eff.org

Free plan WindowsmacOSLinuxSelf-hosted
Visit certbot.eff.org
Spec score 8.1 #9 of 31 in Certificate Management Software

What it is

Certbot is free, open-source software from the Electronic Frontier Foundation for enabling HTTPS on websites that administrators manage themselves. It obtains Let’s Encrypt certificates and can install them on a web server automatically in many cases. The command-line tool names Apache and Nginx integrations, along with webroot and standalone methods. DNS validation avoids requiring an inbound connection from Let’s Encrypt, so it does not depend on an existing HTTP site or an open port 80. Certbot renews certificates when less than one-third of their lifetime remains; for certificates lasting 10 days or less, renewal occurs when half their lifetime remains. It is generally run on a Unix-like server, often remotely over SSH, and is intended for administrators comfortable with command-line work on a dedicated server, VPS or cloud-hosted server. The project points users to its documentation and the Let’s Encrypt community forum for help.

Spec sheet

Purpose
Certbot automatically uses Let’s Encrypt certificates on manually administered websites to enable HTTPS.Read 3 Oct 2026 · certbot.eff.org
Intended users
Certbot may suit people comfortable with the command line who administer a website on a dedicated server, VPS, or cloud-hosted server.Read 3 Oct 2026 · certbot.eff.org
Support
The site points users to project documentation and the Let’s Encrypt community forum for help.Read 3 Oct 2026 · certbot.eff.org
Headquarters
San Francisco, California, United StatesRead 28 Sep 2026 · certbot.eff.org
Maker
Certbot is made by the Electronic Frontier Foundation, which the site describes as a 501(c)(3) nonprofit based in San Francisco, California.Read 3 Oct 2026 · certbot.eff.org
Certificate renewal
Certbot renews certificates when less than one-third of their lifetime remains, or half their lifetime for certificates lasting 10 days or less.Read 3 Oct 2026 · certbot.eff.org
Command line
Certbot runs from a command-line interface, usually on a Unix-like server, and most users run it on a remote server over SSH.Read 3 Oct 2026 · certbot.eff.org
DNS validation
DNS validation does not require Let’s Encrypt to make an inbound connection to the server, so an existing HTTP site or open port 80 is not required for this method.Read 3 Oct 2026 · certbot.eff.org
HTTPS automation
Certbot can help obtain a certificate from a certificate authority and install it onto a web server automatically in many cases.Read 3 Oct 2026 · certbot.eff.org
Open source
Certbot is free, open source software.Read 3 Oct 2026 · certbot.eff.org
Security purpose
The project says it aims to help make the internet more structurally private, safe, and protected against censorship through HTTPS adoption.Read 3 Oct 2026 · certbot.eff.org
Shared hosting limitation
Certbot is less suitable for most shared hosting environments, where asking the provider to set up HTTPS is usually easier and more reliable.Read 3 Oct 2026 · certbot.eff.org
Web server integration
The site names Apache and Nginx integrations and also describes webroot and standalone usage methods.Read 3 Oct 2026 · certbot.eff.org

Plans and prices

Certbot Free Free, open source software; automatically uses Let’s Encrypt certificates on manually administered websites Read 3 Oct 2026 · certbot.eff.org

Every Certbot plan and price →

Strong points and limits

Strong points

  • Free and open-source software
  • Can install certificates automatically in many cases
  • Supports Apache and Nginx integrations
  • DNS validation needs no inbound connection

Limits

  • Runs through a command-line interface
  • Less suitable for most shared hosting
  • Usually used on a Unix-like server

Who it suits

Certbot suits command-line-comfortable administrators who manage websites on dedicated servers, VPS instances or cloud-hosted servers. It is less suited to most shared hosting environments, where asking the provider to configure HTTPS is usually easier and more reliable.

Verdict

Certbot can automate certificate setup and renewal for manually administered websites. Shared-hosting users may find it more practical to ask their provider to configure HTTPS.

Where Specifiction places it

Alternatives to CertbotAll alternatives →