A simple ACMEv2 client for Windows (for use with Let's Encrypt et al.)

Elliptic Curve

Generates ECDSA keys based on the secp384r1 curve. The curve to use can be configured in settings.json but currently only SEC named curves are supported by this program. The ACME server provider may also have limitations.

OCSP Must Staple

This extension can be added to the CSR with the command line option --ocsp-must-staple

Private key reuse

The option --reuse-privatekey can be used to keep using the same private key across different renewals, which can be useful for example with DANE.


--csr ec