# FairSSL

> FairSSL A/S is an independent Danish SSL/TLS certificate provider (founded 2010, CVR DK33075782) selling from DigiCert, GlobalSign and Sectigo. Its core technical strength is a cloud ACME server with FairSSL AutoDNS: automated certificate issuance and renewal without DNS API keys or open ports on your servers.

## Key facts
- The ACME automation fee is charged per certificate per year, on top of the certificate price, and covers up to 25 servers per certificate. A 26th server adds another fee of the same size. Reissues within the paid order period are included; the annual order renewal is a separate purchase.
- Protocol: ACME v2 (RFC 8555) with ACME Renewal Information / ARI (RFC 9773). Account binding uses External Account Binding (EAB, preferred, supports multiple accounts) or a custom directory URL (one per account) for appliances without EAB. ACME directory URL: https://fairssl.dk/acme
- Certificate types via ACME: DV and OV, plus EV via GlobalSign with prior validation. Certificate authorities: the DigiCert family (RapidSSL, Thawte, GeoTrust, DigiCert) and GlobalSign. Sectigo ACME is not yet available.
- FairSSL AutoDNS: create one CNAME record (_dnsauth.your-domain CNAME your-id.autodns.fairssl.dk). A single record on the base domain covers all names on the domain, including wildcards. Your servers need no DNS API keys and no open ports. AutoDNS handles validation for DigiCert-family brands (DigiCert, RapidSSL, GeoTrust, Thawte).

## ACME automation
- [SSL automation (ACME)](https://www.fairssl.dk/en/ssl-automation/): overview, pricing, supported platforms
- [How FairSSL ACME works](https://www.fairssl.dk/en/ssl-automation/how-it-works/): protocol, EAB, ARI, AutoDNS, HTTP-01 vs DNS-01
- [FairSSL AutoDNS](https://www.fairssl.dk/en/ssl-automation/auto-dns/): DNS validation without keys or open ports
- [FairSSL ACME vs Let's Encrypt](https://www.fairssl.dk/en/ssl-automation/fairssl-vs-lets-encrypt/): comparison and priced scenarios
- [ACME clients](https://www.fairssl.dk/en/ssl-automation/clients/): simple-acme, Lego, certbot, acme.sh, cert-manager, Posh-ACME
- [Appliances and load balancers](https://www.fairssl.dk/en/ssl-automation/appliances/): FortiGate, NetScaler, F5, KEMP, Kubernetes

## Products and tools
- [SSL certificates](https://www.fairssl.dk/en/products/): DV, OV and EV from multiple brands
- [SSL tools](https://www.fairssl.dk/en/tools/): SSL scanner, CAA generator, certificate decoder

## Company
- [About FairSSL](https://www.fairssl.dk/en/about/): independent, multi-CA, transparent pricing
- [Contact](https://www.fairssl.dk/en/contact/): phone and email support in Danish, Swedish and English

## Localized sites
- Danish: https://www.fairssl.dk/da/
- Swedish: https://www.fairssl.se/sv/