What ZeroSSL is
ZeroSSL is a commercial CA that issues free 90-day DV certificates while also selling paid plans with more features. Its roots are widely trusted, so the certificates work everywhere like any other public CA.
ACME with EAB
ZeroSSL supports ACME, but requires EAB credentials (External Account Binding) that tie the ACME account to your ZeroSSL account. That is one extra setup step compared with Let's Encrypt, but the flow is the same afterwards: automatic issuance and renewal.
What the paid plans add
Beyond free DV, ZeroSSL offers OV/EV certificates, a REST API for certificate management, more concurrent certificates, and support tiers. That makes it interesting if you need organisation validation or programmatic control without leaving ACME.
ZeroSSL vs Let's Encrypt
Both are solid. Let's Encrypt is pure non-profit and requires no EAB; ZeroSSL adds OV/EV, an API and support for a fee. We compare them head to head in Let's Encrypt vs ZeroSSL, and look at the wider field in best free SSL providers.
How CertControl helps
CertControl's ACME server can relay to ZeroSSL (including EAB handling), and CertControl monitors the certificates across all your CAs — so you never lose the overview, wherever they were issued.
Frequently asked questions
Is ZeroSSL free?
ZeroSSL offers free 90-day DV certificates. Paid plans add OV/EV, a REST API, more certificates and support.
Why does ZeroSSL require EAB?
EAB (External Account Binding) ties your ACME client to your ZeroSSL account. It is one extra setup step compared with Let's Encrypt.
Can ZeroSSL issue OV/EV?
Yes. Unlike Let's Encrypt, ZeroSSL offers organisation and extended validation on paid plans.