ZoTrus Dual-Algorithm SSL Certificate Automation Subscription Service (Based on SM2 ACME Client)

This service is based on the successful practice in automatic dual-algorithm SSL certificate management at ZoTrus HTTPS Automation Gateway, and following the draft cryptography industry standard "Automatic Certificate Management Specification" led by ZoTrus, the SM2 ACME client software -SM2cerBot is fully open-sourced, and provide the public service with completely free SM2 ACME dual-algorithm SSL certificate automation subscription services as well as professional paid services. This is ZoTrus’ ongoing contribution as a leader in SM2 SSL certificate automation management, aimed at further promoting the automation of SM2 SSL certificate management. We warmly welcome choosing our services.

Scan the code to add customer service WeChat

Free ACME Service

0 Yuan/Site/5 Years

Coming Soon

ACME OV Service

4000 Yuan/Site/5 Years

Coming Soon

ACME EV Service

5000 Yuan/Site/5 Years

Coming Soon

Int'l SSL Cert TypeGlobally trusted

DV SSL Certificate

Int’l SSL Cert AlgorithmFaster, hybrid PQC preferred

ECC

SM2 SSL Cert TypeTrusted by all SM2 browsers

DV SSL Certificate

OV SSL Certificate

EV SSL Certificate

SM2 SSL Cert AlgorithmFaster，SM2 hybrid PQC preferred

SM2

Service Fee (5 years)Auto-issuance of dual certificates unlimited times within 5 years

0 Yuan

4000 Yuan/Site/5 Years

18000 Yuan/Site/5 Years

32000 Yuan/10 Sites/5 Years

5000 Yuan/Site/5 Years

22500 Yuan/Site/5 Years

40000 Yuan/10 Sites/5 Years

Optional RSA OV CertIssued by SHECA

RSA OV SSL Certificate

Optional RSA OV Cert Fee (5 years) By Sectigo +400Yuan/Site/Year
By SSL.com +400Yuan/Site/Year

0 元

5500 Yuan/Site/5 Years

23500 Yuan/Site/5 Years

41500 Yuan/10 Sites/5 Years

6500 Yuan/Site/5 Years

27500 Yuan/Site/5 Years

48500 Yuan/10 Sites/5 Years

Optional RSA EV CertIssued by Sectigo

RSA EV SSL Certificate

Optional RSA EV Cert Fee (5 years)

7500 Yuan/Site/5 Years

32500 Yuan/Site/5 Years

58500 Yuan/10 Sites/5 Years

Validity of dual certificateChange to 47 days before January 1, 2029

90 days

ACME API

Support

ACME Client

SM2cerBot, Open-source

Technical Support

Yes

Website Trusted Identify Validation ServiceZT Browser address bar displays the company name and T3/T4 icon

Yes，T3 Certification

Yes，T4 Certification

Int’l Root CAECC Chain+2004 root cross signed

SSLcom X Sectigo

SM2 Root CAChina Licensed CA (DFCA) (GZCA)

DFCA

Guizhou CA or DFCA

Optional OV/EV Cert Price
(DigiCert, CFCA) Additional fee is charged, after the OV/EV certificate expires, a DV certificate is auto issued by default.

OV SSL Certificate：
5000 Yuan/Year/Site

EV SSL Certificate：
8000 Yuan/Year/Site

SM2 ACME Service Deployment Guide

Users must register a ZoTrus account and complete email validation. It is recommended to link WeChat for real-time push notifications of automatic certificate issuance.
After logging in, obtain the ACME external account binding token and parameters such as the ACME service URL.
Download the ZoTrus SM2 ACME client - SM2cerBot, install the software, and configure the SM2 ACME service parameters.
Download TongsuoSSL and recompile Nginx according to the user guide.
Activate the SM2cerBot software, configure the website domain name, and wait for the automatic configuration of dual-algorithm SSL certificates. Once the certificate is configured, the Nginx service will restart to enable the dual-algorithm SSL certificate ACME service.
Users can login to its ZoTrus account to view the status of automatic certificate issuance, purchase paid services online, and apply for paid SSL certificates, waiting for the OV SSL certificate to complete identity validation and issuance. The SM2 ACME client - SM2cerBot will automatically update the certificate to an OV SSL certificate.