How to sign up for an ACME subscription?

Start by logging into your Gandi account, then go to https://gandi.net/certificate/acme.

You will arrive on a page listing all of your ACME subscriptions, which you can filter by Organizations via the drop-down menu at the top.

Right next to it you will find the button to subscribe to a new subscription. Click on it.

Select type and name

On the next page you will, for the moment, only have the choice of “Standard” certificates.

On the next line, the Subscription name can be modified. We recommend that you choose a name that allows you to easily know which certificates are involved.

Select domains

You have two choices to specify the domains concerned:

Import from CSV file

If you already have a .csv file with the domains (including subdomains and/or wildcards), by selecting this choice you will be able to “drag and drop” the file directly onto the area provided, or use the button to fetch it from your hard drive.

Add domains manually

In the area provided for this purpose you can enter your different domains, subdomains and wildcards, one per line. If necessary, the zone can be enlarged using the handle located at the bottom right of said zone.

But you can also directly “drag and drop” a .txt type file, as long as it is “simple” text and the domains are set one per line.

And you can also “drag and drop” a .csv type file.

Finalize the order

Once the domains are added, simply click “Confirm” and the system will analyze the domains and calculate the annual subscription cost. The result will be displayed in a drop-down menu, allowing you to choose another longer period if you wish, the total will be automatically been recalculated.

Note

At the moment the subscription period is limited to 3 years.

Then click “Continue” to proceed to the next step

Choose billing address

On the next page, select the organization that will be billed and will own the ACME certificates. You can also create a new one if the need arises. Once you have chosen your billing address, click “Continue” to proceed to confirmation and payment.

Confirmation page

The confirmation page allows you to make some last minute changes (billing address, subscription duration), but above all it lists the different “configurations” of certificates billed (type (standard or pro), type of domains (single domain, subdomain, wildcards), etc. To view the details of each domain, place your cursor on the (i) at the end of the line.

When you are sure that everything matches, validate the Contracts and click on “Proceed to payment”. You will arrive on the usual payment type selection page.

And then

Once payment has been validated, you can return to the general ACME subscriptions page. Once these have been validated, they will appear in the list.

Click on the chevron at the end of the line of the subscription concerned to go to the subscription detail page.

Subscription details

Status

On this page you will find information on the status of the subscription (valid, suspended, etc.), the type of validation, the expiration date, etc. You can also rename the subscription using the “pen” icon.

The “technical” area

There are two types of subscription, the same for both CAs

  • Standard (Domain Validation - DV)

  • Pro (Organization Validation - OV)

Choosing one or the other doesn’t matter. The certificates will then be managed automatically via the ACME protocol. These will be either DV or OV certs.

For domain types, you can put a ‘single’ domain or a ‘Wildcard’ (covering all subdomains of the same level).

There are no technical constraints, you can have both types of domains in the same ACME subscription.

The only difference will be in the price: domains are billed individually, and a wildcard does not have the same price as a domain alone.

Once the subscription is validated and created, Gandi will provide you with the necessary information to connect to the ACME server via your bot:

  • Login: eab-kid

  • ACME code: eab-hmac

  • URL (that of the CA you have chosen, Sectigo or Digicert)

Note that automation via the ACME client is an installation to be done on your side. Gandi only provides access to the ACME server of partner CAs.

Gandi only manages the subscription, that is to say the list of domains to be provided. The actual management of certificates will now be done directly via ACME, or directly between your client and the CA.

The list of domains

This list includes all domains, subdomains and wildcards that are part of the subscription. You can of course delete some (which will be refunded directly to your prepaid account if withdrawn within 29 days of their addition), or add some (you will then go through the billing phase again).

Remove domains

This link will display checkboxes in front of each of your listed domains. Check those you want to delete then validate with the link in the blue bar that appears. You can combine search and deletion by searching for a series of domains and selecting all.

Add domains

A drawer will open to the right of your page. You can only add domains, subdomains or wildcards manually, one per page, or by importing a .csv file. The result will be added to your basket and you can finalize the subscription via the latter.

Attention

At the very bottom of the page you will find a “Cancel subscription” button. The latter cancels ALL AREAS of this subscription and it is neither recoverable nor refundable (except during the first 29 days).