Certbot
San Francisco, California, United States
What it is
Certbot is free, open-source software for obtaining Let’s Encrypt certificates and enabling HTTPS on manually administered websites. It can install certificates on a web server automatically in many cases and renew them as they approach expiration: renewal begins when less than one-third of a certificate’s lifetime remains, or halfway through the lifetime for certificates lasting 10 days or less. The project lists integrations for Apache and Nginx, along with webroot and standalone methods. DNS validation is another option; it does not require an inbound connection from Let’s Encrypt, so it does not depend on an existing HTTP site or an open port 80. Certbot runs through a command-line interface, usually on a Unix-like server, and many users operate it on a remote server over SSH. It may suit administrators of dedicated servers, VPSs, or cloud-hosted servers who are comfortable with command-line work. The project points users to its documentation and the Let’s Encrypt community forum for help. Certbot is made by the Electronic Frontier Foundation, a San Francisco-based nonprofit.
For and against
For
- Free and open source
- Can automate certificate installation in many cases
- Supports Apache, Nginx, webroot, and standalone methods
- Renews certificates automatically
- DNS validation does not require inbound server access
Against
- Runs through a command-line interface
- Less suitable for most shared hosting environments
The verdict
Certbot can automate certificate setup and renewal for administrators managing their own web servers. Most shared hosting users may find it easier to ask their provider to configure HTTPS.
Who it suits
Certbot suits website administrators comfortable using the command line on dedicated, VPS, or cloud-hosted servers. DNS validation may fit setups that cannot accept an inbound connection from Let’s Encrypt.
Plans and prices
Certbot
Free, open source software; automatically uses Let’s Encrypt certificates on manually administered websites
Read 3 Oct 2026 · certbot.eff.org
On the record
- Certificate renewal
- Certbot renews certificates when less than one-third of their lifetime remains, or half their lifetime for certificates lasting 10 days or less.certbot.eff.org · read 3 Oct 2026
- Command line
- Certbot runs from a command-line interface, usually on a Unix-like server, and most users run it on a remote server over SSH.certbot.eff.org · read 3 Oct 2026
- DNS validation
- DNS validation does not require Let’s Encrypt to make an inbound connection to the server, so an existing HTTP site or open port 80 is not required for this method.certbot.eff.org · read 3 Oct 2026
- HTTPS automation
- Certbot can help obtain a certificate from a certificate authority and install it onto a web server automatically in many cases.certbot.eff.org · read 3 Oct 2026
- Intended users
- Certbot may suit people comfortable with the command line who administer a website on a dedicated server, VPS, or cloud-hosted server.certbot.eff.org · read 3 Oct 2026
- Maker
- Certbot is made by the Electronic Frontier Foundation, which the site describes as a 501(c)(3) nonprofit based in San Francisco, California.certbot.eff.org · read 3 Oct 2026
- Open source
- Certbot is free, open source software.certbot.eff.org · read 3 Oct 2026
- Purpose
- Certbot automatically uses Let’s Encrypt certificates on manually administered websites to enable HTTPS.certbot.eff.org · read 3 Oct 2026
- Security purpose
- The project says it aims to help make the internet more structurally private, safe, and protected against censorship through HTTPS adoption.certbot.eff.org · read 3 Oct 2026
- Shared hosting limitation
- Certbot is less suitable for most shared hosting environments, where asking the provider to set up HTTPS is usually easier and more reliable.certbot.eff.org · read 3 Oct 2026
- Support
- The site points users to project documentation and the Let’s Encrypt community forum for help.certbot.eff.org · read 3 Oct 2026
- Web server integration
- The site names Apache and Nginx integrations and also describes webroot and standalone usage methods.certbot.eff.org · read 3 Oct 2026
