ZoTrus Dual-Algorithm SSL Certificate Automation Subscription Service

This service is based on the successful practice in automatic dual-algorithm SSL certificate management at ZoTrus HTTPS Automation Gateway, and following the draft cryptography industry standard "Automatic Certificate Management Specification" led by ZoTrus, the SM2 ACME client software -SM2cerBot is fully open-sourced, and provide the public service with completely free SM2 ACME dual-algorithm SSL certificate automation subscription services as well as professional paid services. This is ZoTrus’ ongoing contribution as a leader in SM2 SSL certificate automation management, aimed at further promoting the automation of SM2 SSL certificate management. We warmly welcome choosing our services. Deployment Guide >>

Scan the code to add customer service WeChat

Free ACME Service

0 RMB

Apply now

ACME OV Service

4000 RMB / Site / 5Year

Coming Soon

ACME EV Service

5000 RMB / Site / 5Year

Coming Soon

Int'l SSL Cert TypeGlobally trusted

DV SSL Certificate

Int’l SSL Cert AlgorithmFaster, hybrid PQC preferred

ECC

SM2 SSL Cert TypeTrusted by all SM2 browsers

DV SSL Certificate

OV SSL Certificate

EV SSL Certificate

SM2 SSL Cert AlgorithmFaster，SM2 hybrid PQC preferred

SM2

Service Fee (5 years)Auto-issuance of dual certificates unlimited times within 5 years

0 Yuan

4000 Yuan/Site/5 Years

18000 Yuan/Site/5 Years

32000 Yuan/10 Sites/5 Years

5000 Yuan/Site/5 Years

22500 Yuan/Site/5 Years

40000 Yuan/10 Sites/5 Years

Validity of dual certificateChange to 47 days before January 1, 2029

90 days

ACME API

Support

ACME Client

SM2cerBot, Open-source

Technical Support

Yes

Website Trusted Identify Validation ServiceZT Browser address bar displays the company name and T3/T4 icon

Yes，T3 Certification

Yes，T4 Certification

Int’l Root CAECC Chain+2004 root cross signed

SSLcom X Sectigo

SM2 Root CAChina Licensed CA (DFCA) (GZCA)

DFCA

Guizhou CA or DFCA

SM2 ACME Service Deployment Guide

Users must register a ZoTrus account and complete email validation. It is recommended to link WeChat for real-time push notifications of automatic certificate issuance.
After logging in, obtain the ACME external account binding token and parameters.
Download TongsuoSSL and recompile Nginx according to the user guide.
Download compile and install the SM2 ACME client software - SM2cerBot, configure the website domain name, and wait for the automatic configuration of dual-algorithm SSL certificates. Once the certificate is configured, the Nginx service will restart to enable the dual-algorithm SSL certificate ACME service.
Users can login to its ZoTrus account to view the status of automatic certificate issuance, purchase paid services online, and apply for paid SSL certificates, waiting for the OV SSL certificate to complete identity validation and issuance. The SM2 ACME client - SM2cerBot will automatically update the certificate to an OV SSL certificate.