A simple ACMEv2 client for Windows (for use with Let's Encrypt et al.)


Default plugin, generates 3072 bits RSA key pairs. The number of bits can be configured in settings.json but may not be less than 2048. For improved compatiblitity with Microsoft Exchange, RSA keys are automatically converted to the Microsoft RSA SChannel Cryptographic Provider.

OCSP Must Staple

This extension can be added to the CSR with the command line option --ocsp-must-staple

Private key reuse

The option --reuse-privatekey can be used to keep using the same private key across different renewals, which can be useful for example with DANE.


[--csr rsa]