Add ZeroSSL

ZeroSSL issues certificates through ACME but requires an External Account Binding (EAB) key pair from its own dashboard first.

1. Create an EAB key pair in ZeroSSL

  1. Sign in at zerossl.com (create a free account if you don't have one).
  2. Go to Developer > ACME in the dashboard.
  3. Click Generate under EAB credentials for ACME clients.
  4. Copy the EAB Key ID and EAB HMAC Key shown.

2. Connect it in aethercert

  1. Go to Manage > Certificate Authorities and click Add certificate authority.
  2. Set Type to ACME CA (public or internal).
  3. Set Provider to ZeroSSL - this fills in the correct ACME directory URL automatically.
  4. Paste the EAB Key ID into EAB key ID.
  5. Paste the EAB HMAC Key into EAB HMAC key.
  6. Name it "ZeroSSL" and save.

3. Use it

Pick this CA when creating a certificate under Build > Certificate Jobs. ZeroSSL's free tier caps at 100 certificates per account - if you hit that limit, either request an increase from ZeroSSL or add a second CA entry.