Let's Encrypt

Hanzo KMS can connect to Let's Encrypt using the ACME-compatible CA integration to issue certificates back to your end-entities.

To connect Hanzo KMS to Let's Encrypt, follow the steps in the ACME-compatible CA integration guide but use the Let's Encrypt ACME Directory URL: https://acme-v02.api.letsencrypt.org/directory.

Note that Let’s Encrypt issues 90-day certificates and enforces a limit of 50 certificates per registered domain per week.

We strongly recommend testing your setup against the Let's Encrypt staging environment first at the ACME Directory URL https://acme-staging-v02.api.letsencrypt.org/directory prior to switching to the production environment. This allows you to verify your DNS configuration and certificate issuance process without consuming production rate limits.