To issue an SSL certificate using Sectigo's ACME Enterprise endpoint with Certbot, use the following command:

certbot certonly --standalone \
  --non-interactive \
  --agree-tos \
  --email This email address is being protected from spambots. You need JavaScript enabled to view it. \
  --server https://acme.enterprise.sectigo.com \
  --eab-kid 6c93efa8a02e4d8f7cec139c5ed2affd \
  --eab-hmac-key K3cTajrdnFYp0c3TdX5Te5UjB3NfA8IEMQAdLNP83nGmkeke3hkcMwcEhv6i7GXEG5oQ2gu2IBcQhbYttZdpbz7w \
  --domain example.wm.edu \
  [--domain additional-domain.wm.edu]

 

Explanation of flags:

  • --certonly: Tells Certbot to only obtain the certificate without modifying web server configs.

  • --standalone: Runs its own temporary web server for domain validation (requires port 80).

  • --non-interactive: Prevents prompts; all options must be provided up front.

  • --agree-tos: Automatically agree to the Terms of Service.

  • --email: Email address for urgent expiration notices.

  • --server: Specifies the Sectigo ACME server endpoint.

  • --eab-kid: Your External Account Binding Key ID provided by Sectigo.

  • --eab-hmac-key: Your EAB HMAC key also provided by Sectigo.

  • --domain: One or more domains to secure. Add --domain multiple times if needed.


Be sure to replace:

  • This email address is being protected from spambots. You need JavaScript enabled to view it. with your admin email.

  • example.wm.edu with your actual domain(s).

This command is used in environments where automatic integration with Sectigo is set up via EAB credentials, such as institutional or enterprise systems.