To issue an SSL certificate using Sectigo's ACME Enterprise endpoint with Certbot, use the following command:
certbot certonly --standalone \
--non-interactive \
--agree-tos \
--email This email address is being protected from spambots. You need JavaScript enabled to view it. \
--server https://acme.enterprise.sectigo.com \
--eab-kid 6c93efa8a02e4d8f7cec139c5ed2affd \
--eab-hmac-key K3cTajrdnFYp0c3TdX5Te5UjB3NfA8IEMQAdLNP83nGmkeke3hkcMwcEhv6i7GXEG5oQ2gu2IBcQhbYttZdpbz7w \
--domain example.wm.edu \
[--domain additional-domain.wm.edu]
Explanation of flags:
-
--certonly
: Tells Certbot to only obtain the certificate without modifying web server configs. -
--standalone
: Runs its own temporary web server for domain validation (requires port 80). -
--non-interactive
: Prevents prompts; all options must be provided up front. -
--agree-tos
: Automatically agree to the Terms of Service. -
--email
: Email address for urgent expiration notices. -
--server
: Specifies the Sectigo ACME server endpoint. -
--eab-kid
: Your External Account Binding Key ID provided by Sectigo. -
--eab-hmac-key
: Your EAB HMAC key also provided by Sectigo. -
--domain
: One or more domains to secure. Add--domain
multiple times if needed.
Be sure to replace:
-
with your admin email.This email address is being protected from spambots. You need JavaScript enabled to view it. -
example.wm.edu
with your actual domain(s).
This command is used in environments where automatic integration with Sectigo is set up via EAB credentials, such as institutional or enterprise systems.