Save Up to 80% On Top SSL Brands

Low Prices. 24/7 Support. SSL Experts.

ACME SSL Compatibility Tool – Check Your Server Environment

This tool helps you determine whether your server or hosting environment supports ACME-based SSL certificate automation.
An environment is considered ACME compatible if it supports fully automated certificate issuance, installation, and renewals using an ACME client, with no manual steps required.

Select the server or hosting environment where your SSL certificate will be installed:

PlatformEnvironmentACME Compatible?Recommended ClientNotesSetup Guide
Linux ServerApache HTTP ServerYesCertbot (Apache plugin)View Setup Guide β†’
Linux ServerNGINXYesCertbot, acme.shView Setup Guide β†’
Linux ServerLiteSpeed / OpenLiteSpeedYesacme.shMay require manual server reload or cert path configuration in admin panel.View Setup Guide β†’
Linux ServerCaddy (v2.9+)YesBuilt-in (Caddy)Requires Caddy 2.9+ for ARI support.
Linux ServerUbuntu ServerYesCertbotView Setup Guide β†’
Linux ServerDebianYesCertbotView Setup Guide β†’
Linux ServerRHEL / AlmaLinux / RockyYesCertbotView Setup Guide β†’
Linux ServerFreeBSDYesacme.sh
Linux ServerLAMP/LEMP StackYesCertbotView Setup Guide β†’
Linux ServerNode.js (Linux)Yesacme.sh
Linux ServerApache Tomcat (Linux)Yesacme.shRequires post-issuance script to import cert into Java keystore.
Windows ServerMicrosoft IISYessimple-acmeView Setup Guide β†’
Windows ServerMicrosoft ExchangeYessimple-acme
Windows ServerNode.js (Windows)Yesacme.sh
Windows ServerApache Tomcat (Windows)LimitedPosh-ACME, simple-acmeRequires manual deploy script or Java keystore integration.
Kubernetes & ContainersKubernetes (any distro)Yescert-managerSupports custom ACME issuers with EAB.
Kubernetes & ContainersEKS (AWS)Yescert-manager
Kubernetes & ContainersGKE (Google)Yescert-managerConfigure Issuer with custom CA endpoint and EAB.
Kubernetes & ContainersAKS (Azure)Yescert-manager
Kubernetes & ContainersDigitalOcean Kubernetes (DOKS)Yescert-managerConfigure ClusterIssuer with custom CA directory URL and EAB.
Kubernetes & ContainersLinode Kubernetes (LKE)Yescert-manager
Kubernetes & ContainersTraefikYesTraefik (built-in)Set caServer to custom CA directory URL.
Kubernetes & ContainersOpenShift Container PlatformYescert-managerUse cert-manager with a custom ACME Issuer/ClusterIssuer and CA-provided account credentials (e.g., EAB) for automation. HTTP-01 via ingress/route or DNS-01 supported depending on setup.
Control PanelcPanel/WHM (with SSH)Yesacme.sh (cPanel deploy hook)Requires SSH accessView Setup Guide β†’
Load Balancers / FirewallsOPNsenseYesacme.sh (Integrated)HTTP-01 requires port 80 accessible.
Load Balancers / FirewallspfSenseYesacme.sh (Integrated)Supports HTTP-01 and DNS-01 validation.
Load Balancers / FirewallsF5 NGINXYesCertbot, acme.shCommonly supports full automation when ACME client runs on-host and can reload NGINX automatically.
Load Balancers / FirewallsHAProxyYesacme.sh, CertbotFull automation is achievable with ACME client + deploy hook to reload HAProxy (or via a companion TLS terminator).
Shared Hosting1&1 IONOSNoN/AThird-party SSL blocked. Proprietary panel with no SSL upload.
Shared HostingHosting (formerly A2)Yesacme.shcPanel with SSH enabled by default on all plans (port 7822).
Shared HostingBluehostLimitedN/AReports indicate CLI/UAPI-based SSL installation may be restricted on shared hosting plans, preventing full ACME automation.
Shared HostingDreamHostLimitedN/AReports indicate programmatic SSL installation may be restricted. DNS API supports certificate issuance, but deployment requires manual panel upload.
Shared HostingGoDaddy (Shared)Yesacme.sh (cPanel deploy hook)
Shared HostingHostGatorLimitedN/AReports indicate CLI/UAPI-based SSL installation may be restricted on shared hosting plans, preventing full ACME automation.
Shared HostingHostingerNoN/AProprietary hPanel has no deployment API.
Shared HostingNamecheapYesacme.sh (cPanel deploy hook)EasyWP not supported.
Shared HostingSiteGroundLimitedN/AProprietary Site Tools panel has no deployment API. SSH available but certs must be manually imported.
Website BuildersBigCommerceNoN/AACME automation is not supported.
Website BuildersPressableNoN/AACME automation is not supported.
Website BuildersShopifyNoN/AACME automation is not supported.
Website BuildersSquarespaceNoN/AACME automation is not supported.
Website BuildersWebflowNoN/AACME automation is not supported.
Website BuildersWeeblyNoN/AACME automation is not supported.
Website BuildersWixNoN/AACME automation is not supported.
Website BuildersWordPress.comNoN/AACME automation is not supported. Not to be confused with self-hosted WordPress.org.

Can’t find your environment above? Look up your hosting product below:

ProviderProduct NameACME Compatible?Typical EnvironmentNotesSee Section
AWSEC2 (Linux)YesAmazon Linux, Ubuntu, CentOS, RHEL, etc.Linux Server
AWSEC2 (Windows)YesWindows Server + IISComplex multi-site IIS bindings may require manual scripting.Windows Server
AWSLightsail (Linux)YesAmazon Linux, Ubuntu, LAMP, Node.js, DockerLinux Server
AWSLightsail (Windows)YesWindows Server + IISWindows Server
Google CloudCompute Engine (Linux)YesDebian, Ubuntu, CentOS, RHEL, SUSEHTTP-01 requires port 80 open in GCP firewall.Linux Server
Google CloudCompute Engine (Windows)YesWindows Server 2019/2022 + IISHTTP-01 requires port 80 open in GCP and Windows firewall.Windows Server
Microsoft AzureVirtual Machines (Linux)YesUbuntu, Debian, RHEL, AlmaLinux, CentOSLinux Server
Microsoft AzureVirtual Machines (Windows)YesWindows Server + IISComplex IIS bindings may require manual configuration.Windows Server
DigitalOceanDroplets (Linux)YesUbuntu, Debian, CentOS, Fedora, Rocky, AlmaLinux Server
VultrCloud Compute (Linux)YesUbuntu, CentOS, Debian, Rocky, etc.HTTP-01 requires port 80 open.Linux Server
VultrCloud Compute (Windows)YesWindows Server 2016/2019/2022 + IISWindows Server
Linode (Akamai)Compute InstancesYesAlmaLinux, Alpine, Arch, CentOS, Debian, etc.Linux Server
HetznerCloud / DedicatedYesUbuntu, Debian, CentOS, Rocky, etc.Linux Server
Oracle CloudOCI Compute (Linux)YesOracle Linux, Ubuntu, CentOS, etc.HTTP-01 requires port 80 in OCI security list.Linux Server
Oracle CloudOCI Compute (Windows)YesWindows Server 2019/2022 + IISHTTP-01 requires port 80 in OCI and Windows firewall.Windows Server
OVHcloudPublic Cloud (Linux)YesUbuntu, Debian, CentOS, Rocky, etc.Linux Server
OVHcloudPublic Cloud (Windows)YesWindows Server 2016/2019/2022Windows Server
IBM CloudVPC VSI (Linux)YesUbuntu, Debian, RHEL/Rocky/Alma, SLESLinux Server
IBM CloudVPC VSI (Windows)YesWindows Server 2019/2022 + IISWindows Server
GoDaddyVPS/Dedicated (Linux - no panel)YesAlma/Rocky/Ubuntu + Apache/NginxLikely would need to enable root access.Linux Server
GoDaddyVPS/Dedicated (Linux + cPanel)YesAlma/Rocky/Ubuntu + ApacheControl Panel
GoDaddyVPS/Dedicated (Windows - no panel)YesWindows Server 2019/2022 + IISLikely would need to enable root access.Windows Server
GoDaddyVPS/Dedicated (Windows + Plesk)LimitedWindows Server + IIS + PleskFull automation may require Plesk CLI scripting.Windows Server
Liquid WebVPS (Linux)YesUbuntu, CentOS (often with managed panels)Linux Server
Liquid WebVPS (Windows)YesWindows Server + IIS (possibly Plesk)Windows Server