{"eid":"zerossl","name":"ZeroSSL","domain":"zerossl.com","resolved_by":"domain","topics":["domains-dns"],"n_records":1,"best_vorder":1,"review":null,"aliases":["ZeroSSL","zerossl.com"],"records":[{"rid":"domains-dns/zerossl","card":{"rid":"domains-dns/zerossl","eid":"zerossl","topic":"domains-dns","slug":"zerossl","provider":"ZeroSSL","url":"https://zerossl.com/documentation/acme/","domain":"zerossl.com","category":"certificate authority","tier":"ACME (all plans)","verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","self_hosted":0,"confidence":"documented","binding":"none","identity_kind":"email","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"rest","egress_metered":0,"per_object_bytes":null,"retention_days":90,"verified_at":"2026-11-03T16:43:09.557Z","verified_basis":"live","checked_on":"2026-11-03","stale_on":"2026-12-04","n_evidence":12,"usd_month":null,"usd_per_tb_month":null,"summary":"unlimited 90-day certificates over ACME at no charge, with multi-domain and wildcard certificates; the Free plan's own dashboard allowance is 3 90-day certif...","duplicate_of":null,"n_unknown":0,"free_unit":"unlimited"},"record":{"topic":"domains-dns","slug":"zerossl","provider":"ZeroSSL","url":"https://zerossl.com/documentation/acme/","category":"certificate authority","tier":"ACME (all plans)","free_tier":{"stated":"unlimited 90-day certificates over ACME at no charge, with multi-domain and wildcard certificates; the Free plan's own dashboard allowance is 3 90-day certificates","unit":"unlimited","source_url":"https://zerossl.com/documentation/acme/","read_on":"2026-11-03","metered_on":"none"},"per_object_cap":{"stated":"a certificate name may have at most six labels below the public suffix, the wildcard asterisk included; a deeper name needs the ZeroSSL REST API instead of ACME","bytes":null,"source_url":"https://zerossl.com/documentation/acme/"},"retention":{"stated":"ACME certificates are valid 90 days (the directory is named DV90) and must be renewed","days":90,"source_url":"https://zerossl.com/documentation/acme/"},"egress":{"terms":"no charge","metered":false,"free_allowance":null,"price_per_tb":null,"source_url":"https://zerossl.com/documentation/acme/"},"interface":["rest"],"interface_detail":"ACME v2 at https://acme.zerossl.com/v2/DV90 with external account binding required (EAB key id and HMAC key made in the dashboard or by GET api.zerossl.com/acme/eab-credentials?access_key=...); a separate ZeroSSL REST API with an access key also exists","tooling":"acme.sh (owned by ZeroSSL), Caddy and CertMagic, dehydrated, win-acme, getssl, acme-companion, any ACME client that supports EAB","chaining":"a second free ACME CA beside Let's Encrypt: the same 90-day certificates with wildcard names and no published per-domain weekly cap, signed by a different CA, so an ACME client can fail over between the two","limits":[{"kind":"request-rate","value":"no ACME rate limit is published: the ACME feature page says 'No Rate Limits' while the documentation says abusive use can be limited or blocked; no number is given","source":"https://zerossl.com/features/acme/"},{"kind":"request-rate","value":"EAB credential creation is limited to a maximum per user per day (the number is unpublished); the credentials are reusable, so one set normally suffices","source":"https://zerossl.com/documentation/acme/"},{"kind":"per-object-cap","value":"at most 6 labels below the public suffix per name, counting a wildcard asterisk","source":"https://zerossl.com/documentation/acme/"}],"binding":"none","binding_note":"no published number binds ACME issuance; the unpublished per-user daily cap on EAB credential creation does not bind a normal client because the credentials are reusable","identity_cost":{"kind":"email","detail":"an account made with an email address and a password; no card is needed for the Free plan; the ACME client then needs EAB credentials from that account (https://app.zerossl.com/signup/free, https://zerossl.com/pricing/)","country":null},"reliability_note":"unverified: no outage history or abuse-block rate was read","confidence":"documented","confidence_note":"the ACME documentation, the ACME feature page, the pricing FAQ, the sign-up page and the EAB error table were captured and quoted; the live ACME directory answered 200 with externalAccountRequired true. Whether a wildcard name needs the DNS-01 challenge is unverified: the ZeroSSL pages read do not say.","evidence":[{"url":"https://zerossl.com/documentation/acme/","date":"2026-11-03","capture":"sha256:54ff0a15b540f0871d99b5d107a07c48d59e8c51b375a92b203ea5cf1281f739","quote":"By using ZeroSSL's ACME feature, you will be able to generate an unlimited amount of 90-day SSL certificates at no charge, also supporting multi-domain certificates and wildcards.","proved":"ACME certificates are free, unlimited in count, valid 90 days, multi-domain and wildcard"},{"url":"https://zerossl.com/documentation/acme/","date":"2026-11-03","capture":"sha256:54ff0a15b540f0871d99b5d107a07c48d59e8c51b375a92b203ea5cf1281f739","quote":"malicious users can be limited or even blocked.","proved":"no number is published; abusive use can be limited or blocked"},{"url":"https://zerossl.com/documentation/acme/","date":"2026-11-03","capture":"sha256:54ff0a15b540f0871d99b5d107a07c48d59e8c51b375a92b203ea5cf1281f739","quote":"the maximum number of labels in subdomains is six, excluding the public suffix","proved":"a name may have at most six labels below the public suffix over ACME"},{"url":"https://zerossl.com/documentation/acme/","date":"2026-11-03","capture":"sha256:54ff0a15b540f0871d99b5d107a07c48d59e8c51b375a92b203ea5cf1281f739","quote":"EAB credentials are limited to a maximum per user/per day.","proved":"EAB credential creation has an unpublished per-user daily cap"},{"url":"https://zerossl.com/features/acme/","date":"2026-11-03","capture":"sha256:1e097abdefa97a875b27bc92be51d6e4cdca6eacff1db26a216528600fad2f25","quote":"No Rate Limits","proved":"the ACME feature page states no rate limits"},{"url":"https://zerossl.com/features/acme/","date":"2026-11-03","capture":"sha256:1e097abdefa97a875b27bc92be51d6e4cdca6eacff1db26a216528600fad2f25","quote":"It's free. No credit card required.","proved":"ACME automation needs no card"},{"url":"https://zerossl.com/pricing/","date":"2026-11-03","capture":"sha256:b2116692e1750d976b5b97e994073ec4e005310f455a16a9a7b00b3a97306fa9","quote":"To get started using the Free Plan, a credit card will not be required.","proved":"the Free plan needs no card"},{"url":"https://zerossl.com/pricing/","date":"2026-11-03","capture":"sha256:b2116692e1750d976b5b97e994073ec4e005310f455a16a9a7b00b3a97306fa9","quote":"you can use our free 90-day ACME certificates","proved":"ACME 90-day certificates are free on all plans"},{"url":"https://zerossl.com/pricing/","date":"2026-11-03","capture":"sha256:b2116692e1750d976b5b97e994073ec4e005310f455a16a9a7b00b3a97306fa9","quote":"3 90-Day Certificates","proved":"the Free plan row lists 3 90-day certificates for the dashboard, apart from the ACME allowance"},{"url":"https://app.zerossl.com/signup/free","date":"2026-11-03","capture":"sha256:ffad40246208ce60c3c21fec9941a0ce581aa3a6ca5771e017c0a8a1873efcc9","quote":"Enter an email address and password to proceed.","proved":"Free plan sign-up asks for an email address and a password"},{"url":"https://zerossl.com/documentation/acme/error-codes/","date":"2026-11-03","capture":"sha256:85234c1e0affb51c8b4166e37451cee507dc3b603819872d3fa3443608326772","quote":"You have created too many EAB credentials today.","proved":"a per-day EAB credential cap is enforced with error 2904"},{"url":"probe:https://acme.zerossl.com/v2/DV90","date":"2026-11-03","capture":"sha256:4603550b5c519a2ae25d18a6bf060e80207e1ea538553509ae7c7071e46e70cf","quote":"\"externalAccountRequired\": true","proved":"the ACME directory is live (HTTP 200, 712 bytes) and requires external account binding"}],"verdict":"qualifies-with-caveat","verified_at":"2026-11-03T16:43:09.557Z","price_per_tb_month":null,"notes":"ZeroSSL sells paid plans with more annual certificates, which the ACME allowance does not need. The free dashboard allowance of 3 certificates and the unlimited ACME allowance are different channels, both stated by ZeroSSL."},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":1.0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:request-rate","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[1].value","kind":"limit:request-rate","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[2].value","kind":"limit:per-object-cap","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[],"history":[],"drift":[]}]}