Sectigo (Comodo) vs acme.sh
A detailed comparison to help you choose between Sectigo (Comodo) and acme.sh.
Quick Verdict
3.6/5
Sectigo (Comodo)
0 reviews
4.2/5
acme.sh
0 reviews
acme.sh is rated higher (4.2 vs 3.6). Sectigo (formerly Comodo CA) is one of the largest SSL certificate providers. DV certificates from about $7.45/year and OV from about $30/year on the reseller channel (higher direct), plus wildcard and multi-domain certificates. Good reseller program. Lightweight shell script that automates ACME certificate issuance and renewal across Let's Encrypt, ZeroSSL, Google Trust Services and more. Integrates with 100-170+ DNS providers (counts vary by source) without requiring root or external dependencies.
Sectigo (Comodo) Affordable OV and EV SSL certificates | acme.sh Free ACME client for automated SSL/TLS certificate management | |
|---|---|---|
| Overview | ||
| Rating | 3.6 (0 reviews) | 4.2 (0 reviews)✓ |
| Pricing model | paid | free |
| Starting price | From $7.45/mo | Free✓ |
| Best for | Web agencies, hosting resellers and SMBs buying OV/EV, wildcard or multi-domain certificates at volume via the reseller channel | DevOps engineers and sysadmins automating free TLS certificates across many domains and DNS providers — especially wildcards, scripted fleets, and resource-constrained Unix environments where Python-based clients do not fit. |
| Features | ||
| IPv6 | ||
| DDoS protection | ||
| Automated backups | ||
| Snapshots | ||
| Managed option | ||
| Bare metal | ||
| GPU available | ||
| S3-compatible | ||
| Hourly billing | ||
| Free tier | ||
| Tags | ||
| Tags | — | free tieropen source |
| Visit Sectigo (Comodo) → | Visit acme.sh → | |
Sectigo (Comodo)
Pros
- + Deep catalog: DV, OV and EV in single-domain, wildcard and multi-domain formats plus code signing
- + Aggressive reseller pricing — PositiveSSL DV from about $7.45/year, OV from about $30/year
- + 99.6% browser and device compatibility from a publicly trusted root
- + Unlimited server licenses, free reissues, 30-day money-back across the range
- + Mature reseller program and certificate lifecycle management tooling for volume buyers
Cons
- - Channel pricing is chaotic — the same certificate varies 3-5x between resellers and the official store
- - OV/EV validation routinely runs 1-5 business days once documentation is submitted, with recurring support complaints
- - Multi-year subscriptions are prepaid one-year certificates requiring annual reissue, which confuses buyers
- - Comodo-era budget brand perception trails DigiCert in enterprise procurement
- - DV-only use cases are undercut by free automated certificate authorities
acme.sh
Pros
- + Free GPLv3 tool with no runtime dependencies beyond a POSIX shell — runs on servers, routers, NAS boxes, and containers alike
- + Broadest DNS-01 provider coverage of any ACME client, plus DNS alias and stateless modes for awkward zones
- + Wildcard, SAN, RSA and ECDSA (default) certificates with HTTP-01, DNS-01 and TLS-ALPN-01 challenge support
- + Multi-CA support (Let's Encrypt, ZeroSSL default, Google Trust Services, SSL.com, Actalis) with a single --server flag
- + Self-installing daily renewal cron and deploy hooks with service reload commands — automation once configured
Cons
- - No support contract, no SLA, and community-only help (wiki, GitHub issues, Gitter) when renewals break
- - Learning curve beyond the basic case: shell flags, environment credentials, DNS propagation behavior
- - DNS API tokens stored on the renewing host are a standing credential — scoping and protecting them is on you
- - GPLv3 copyleft complicates embedding in closed commercial products
- - High maintainer concentration and the curl|sh install idiom warrant release pinning and verification in production
Stay in the loop
Get weekly updates on the best new hosting and infrastructure providers, deals, and comparisons.
No spam. Unsubscribe anytime.