Switching TLS certificate authorities

By default, all webroots use Buypass AS for TLS certificates. These certificates come at no cost — both to The Birbhouse and to members. Some individuals may prefer using alternative free ACME providers — such as Let's Encrypt or ZeroSSL — or a paid provider such as DigiCert or SwissSign.

To switch, set the value of tls.acme to set your ACME URL.

• DigiCert ACME URL — https://one.digicert.com/mpki/api/v1/acme/v2/directory
• Let's Encrypt ACME URL — https://acme-v02.api.letsencrypt.org/directory
• SwissSign ACME URL — https://acme.swisssign.ch/v1/ACME-URL/directory
• ZeroSSL Acme URL — https://acme.zerossl.com/v2/DV90

acme-example.birb.fr {
	tls {
		acme {url}
	}
}

There is no planned support for manual certificate uploads or private ACME providers at this time.