---
name: "acme-tiny"
section: "1"
platform: "linux"
package: "acme-tiny"
version: "1:5.0.1-1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/acme-tiny"
---

# acme-tiny(1)

letsencrypt tiny python client

## NAME

acme-tiny - letsencrypt tiny python client

## SYNOPSIS

**acme-tiny** \[-h\] --account-key ACCOUNT\_KEY --csr CSR --acme-dir ACME\_DIR \[--quiet\] \[--disable-check\] \[--directory-url DIRECTORY\_URL\] \[--contact \[CONTACT \[CONTACT ...\]\]\]

## DESCRIPTION

This script automates the process of getting a signed TLS certificate from Let's Encrypt using the ACME protocol. It will need to be run on your server and have access to your private account key, so PLEASE READ THROUGH IT! It's only ~200 lines, so it won't take long.

## OPTIONS

- **-h, --help**

  Show summary of options

- **--account-key ACCOUNT\_KEY**

  Path to your Let's Encrypt account private key

- **--csr CSR**

  Path to your certificate signing request

- **--acme-dir ACME\_DIR**

  Path to the .well-known/acme-challenge/ directory

- **--quiet**

  Suppress output except for errors

- **--disable-check**

  Disable checking if the challenge file is hosted correctly before telling the CA

- **--directory-url DIRECTORY\_URL**

  Certificate authority directory url, default is Let's Encrypt

- **--contact \[CONTACT \[CONTACT ...\]\]**

  Contact details (e.g. mailto:aaa@bbb.com) for your account-key

## EXAMPLES

**acme-tiny** --account-key ./account.key --csr ./domain.csr --acme-dir /usr/share/nginx/html/.well-known/acme-challenge/ \> signed\_chain.crt

## EXAMPLE CRONTAB RENEWAL

0 0 1 \* \* acme\_tiny --account-key /path/to/account.key --csr /path/to/domain.csr --acme-dir /usr/share/nginx/html/.well-known/acme-challenge/ \> /path/to/signed\_chain.crt 2\>\> /var/log/acme\_tiny.log

## SEE ALSO

[**openssl**(1)](/openssl/1.md), **https://letsencrypt.org/**, **https://github.com/diafygi/acme-tiny#acme-tiny**.