What Let's Encrypt is
Let's Encrypt is run by the non-profit ISRG. It issues only DV certificates — free, and with no manual processing. Its roots are in every major root store, so the certificates are just as trusted as any paid CA.
ACME automation
All issuance happens via the ACME protocol: a client (certbot, acme.sh, Caddy and others) proves domain control via an HTTP-01 or DNS-01 challenge, and the certificate is issued and renewed automatically. The lifetime is 90 days — deliberately short, so automation becomes the norm.
Wildcard and rate limits
Let's Encrypt supports wildcard certificates via the DNS-01 challenge. Be aware of rate limits — including a cap on certificates per registered domain per week and on failed validations. For almost everyone the limits are plenty high; they typically only bite with misconfigured automation loops. Use the staging environment to test.
When Let's Encrypt fits you
For virtually all public web. The limitations are: DV only (no OV/EV) and no support SLA. If you need OV, or want to compare with an alternative, see Let's Encrypt vs ZeroSSL and which CA you should choose.
How CertControl helps
CertControl's built-in ACME server can relay to Let's Encrypt, giving you automatic renewal — and CertControl monitors all the certificates at the same time, warning you well before expiry, whatever client or CA they came from.
Frequently asked questions
Is Let's Encrypt free?
Yes, completely free. Let's Encrypt is a non-profit and does not charge for certificates.
Is Let's Encrypt safe?
Yes. Its roots are in every major root store, so its certificates are exactly as trusted and as secure as any paid CA. The encryption is identical — only the price and validation level differ.
Does Let's Encrypt support wildcards?
Yes, via a DNS-01 challenge. Wildcards require DNS validation, not HTTP validation.
What are Let's Encrypt's rate limits?
They include a cap on certificates per registered domain per week. For normal use the limits are high enough; test against the staging environment if you automate at scale.