Request Wildcard SSL Certificates with acme.sh
162 words
1 minute
Request Wildcard SSL Certificates with acme.sh
Request Wildcard SSL Certificates with acme.sh
Let’s Encrypt provides free wildcard certificates. Combined with the acme.sh script, you can fully automate issuance and renewal — perfect for personal sites.
Install acme.sh
Issue a Certificate (Cloudflare DNS API)
1. Get Your Cloudflare API Key
Log in to Cloudflare Dashboard, go to API Tokens, and get your Global API Key.
2. Configure the API Key
export CF_Key="your-cloudflare-api-key"export CF_Email="your-cloudflare-email"3. Issue the Wildcard Certificate
# Replace with your domain./acme.sh --issue --dns dns_cf -d example.com -d *.example.com4. Verification
The certificate will be installed to ~/.acme.sh/. Check the auto-renewal cron job:
crontab -lacme.sh automatically adds a scheduled task for renewal before expiration.
Working with Nginx Proxy Manager
Copy the generated certificate files to NPM’s directory, or upload them manually through NPM’s web interface.
Notes
- Alibaba Cloud DNS, Tencent Cloud DNS, etc., also have their own DNS API scripts available in the acme.sh official repository
- Wildcard certificates only support DNS verification, not HTTP
- Certificates are valid for 90 days; acme.sh handles renewal automatically
References
Support & Share
If this article helped you, please share or support!
Request Wildcard SSL Certificates with acme.sh
https://blog.zinzin.cc/posts/acme-wildcard-ssl-en/Related PostsSmart
1
Deploy a Nacos Cluster with Docker
DevOpsA complete guide to deploying a 3-node Nacos 2.2 cluster with Docker, using MySQL for persistence and Nginx for load balancing.
2
Docker Image and Container Export/Import Commands Explained
DevOpsClarifying the differences between docker commit/export/import/save/load and when to use each one.
3
Server Initialization Guide
DevOpsA checklist for securing and setting up a new Linux server, including SSH hardening, Docker, NPM, and more.
4
SpringBoot Email Sending with @Async Optimization
JavaIntegrate email sending in Spring Boot, implement async email with @Async, and troubleshoot common @Async pitfalls.
5
Switch Java (JDK) Versions Freely with Scoop
Dev ToolsInstall multiple JDK versions on Windows using Scoop package manager and switch between them with a single command — no more manual environment variable tweaking.
Random PostsRandom
Welcome to my blog! This is a sample announcement.
Posts
8
Categories
4
Tags
27
Total Words
13,116
Running Days
0 days
Last Activity
0 days ago
Domainblog.zinzin.top
Fireflyv6.14.5
Astro Versionv7.0.7
Node Versionv22.23.1
pnpm Versionv9.14.4
Build TimeJuly 24, 2026 at 10:51:50 PM
SystemLinux / x86_64