ZeroSSL Certificate Management with TigerTrust
TigerTrust provides comprehensive integration with ZeroSSL, offering both REST API and ACME protocol support for automated SSL certificate management.
Why ZeroSSL?
ZeroSSL offers compelling advantages:
- Free Certificates: 90-day certificates at no cost
- REST API: Direct API access for automation
- ACME Support: Standard ACME protocol compatible
- Wildcard Certificates: Available on paid plans
- No Rate Limits: Higher limits than Let's Encrypt
Protocol Support
ZeroSSL REST API: Direct API integration for certificate creation, management, and domain validation.
ACME Protocol: Standard ACME v2 with External Account Binding (EAB) for automated certificate lifecycle.
ZeroSSL Plans
| Feature | Free | Basic | Premium |
|---|---|---|---|
| Certificates | 3/month | Unlimited | Unlimited |
| Wildcards | No | Yes | Yes |
| Multi-Domain | Yes | Yes | Yes |
| Validity | 90 days | 90-365 days | 90-365 days |
| API Access | Limited | Full | Full |
| Support | Community | Priority |
Certificate Lifecycle
Automated Issuance:
- Certificate request submitted to ZeroSSL
- Domain validation (DNS, HTTP, or CNAME)
- Certificate issued and downloaded
- Deployed to target servers
Automated Renewal:
- Renewal triggered 14 days before expiry
- Same validation process
- Automatic deployment
- Zero downtime
Domain Validation Methods
DNS Validation (Recommended):
- Automatic DNS record management
- Works with all major DNS providers
- Required for wildcard certificates
HTTP Validation:
- File-based validation
- TigerTrust agent places validation file
- Good for single servers
CNAME Validation:
- One-time DNS setup
- Permanent validation
- Ideal for long-term management
Integration Features
Certificate Discovery:
- Import existing ZeroSSL certificates
- Track certificates not managed by TigerTrust
- Unified certificate inventory
Monitoring & Alerts:
- Expiration notifications
- Validation failure alerts
- Renewal status tracking
Deployment Automation:
- Push certificates to servers
- Reload web servers automatically
- Update load balancers
Getting Started
- Create Account: Sign up at zerossl.com
- Get API Key: Generate API key in dashboard
- Get EAB Credentials: For ACME protocol access
- Configure TigerTrust: Add credentials
- Start Automating: Create certificates
TigerTrust's ZeroSSL integration provides cost-effective SSL automation for organizations of any size.