# Install certbot Tool to obtain certs from Let's Encrypt and autoenable HTTPS. Version 5.6.0 via Homebrew; verified 2026-05-20. ## Install ```sh sudo av install brew:certbot ``` ## Agent safety answer certbot manages TLS certificates and can change web-server certificate state. - **Credential access:** Reads account keys, private keys, webroot paths, and DNS provider credentials. - **Remote mutation:** Can request certificates and modify local server config or DNS plugins. - **Publish/artifact risk:** Can create certificates used by public services. - **Recommended control:** Gate renew, certonly, private-key reads, and DNS credential use. - **Agent-use guidance:** Allow certificate status checks; require approval before issuing, renewing, or editing live certs. Additional install commands: ### macOS - Homebrew (100%): ```sh brew install certbot ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install certbot ``` Evidence: MacPorts ports tree: security/certbot/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add certbot ``` Evidence: Alpine Linux edge package indexes: certbot from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install certbot ``` Evidence: Debian stable package indexes: certbot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install certbot ``` Evidence: Fedora Rawhide package metadata: certbot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#certbot ``` Evidence: nixpkgs package indexes: pkgs/by-name/ce/certbot/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S certbot ``` Evidence: Arch Linux sync databases: certbot from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install python311-certbot ``` Evidence: openSUSE Tumbleweed package metadata: python311-certbot from https://download.opensuse.org/tumbleweed/repo/oss/repodata/155b97171d05e27afd950b6fe0d55513ff38f4597110664535bceedc680bbe6fd459f0733718dcc21dcf0efc7c8250fd1390c73d4790b42e62fb2c16a87242e5-primary.xml.zst ### Windows - winget (92%): ```sh winget install --id EFF.Certbot -e ``` Evidence: Windows Package Manager source index: EFF.Certbot from https://cdn.winget.microsoft.com/cache/source.msix ## Package Facts - **Package key:** brew:certbot - **Package manager:** Homebrew - **Package manager URL:** - **Version:** 5.6.0 - **Source summary:** Tool to obtain certs from Let's Encrypt and autoenable HTTPS - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** Apache-2.0 - **Source archive:** - **Last updated:** 2026-05-20T11:26:15Z - **Generated:** 2026-06-10T07:18:26+00:00 ## Executables - certbot (cli) - certbot (alias) ## Dependencies - augeas - certifi - cryptography - libyaml - pydantic - python@3.14 ## macOS Provided Libraries - libffi ## Install Behavior - Post-install hook: not defined - Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Freshness - Page generated: 2026-06-10 - Package-manager version: 5.6.0 - Package-manager updated: 2026-05-20 - Local data status: ok - Upstream repository: https://certbot.eff.org/ - info: Release/tag comparison is only available for GitHub repositories. ## セキュリティノート no executable entrypoint in the package index. - **Protected-tool coverage:** Plain Text Certbot Account And Certificate Keys - **Geiger risk:** green / low - no executable entrypoint in the package index ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** certbot - **Version Scheme:** 0 - **Revision:** 1 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - certbot - 4.0.0-2+deb13u1: normalized package name match | Debian stable package indexes: certbot from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | automatically configure HTTPS using Let's Encrypt | https://certbot.eff.org/ - Nix - certbot: normalized package name match | nixpkgs package indexes: pkgs/by-name/ce/certbot/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - certbot - 2.9.0-1: normalized package name match | Ubuntu 24.04 LTS package indexes: certbot from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | automatically configure HTTPS using Let's Encrypt | https://certbot.eff.org/ - apk - certbot - 5.6.0-r0: normalized package name match | Alpine Linux edge package indexes: certbot from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | An ACME client that can update Apache/Nginx configurations | https://github.com/certbot/certbot - apk - certbot-pyc - 5.6.0-r0: normalized package name match | Alpine Linux edge package indexes: certbot-pyc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Precompiled Python bytecode for certbot | https://github.com/certbot/certbot - dnf - certbot - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: certbot from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | A free, automated certificate authority client | https://github.com/certbot/certbot - dnf - python-acme-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-acme-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-acme-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-cloudflare-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-cloudflare-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-cloudflare-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-digitalocean-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-digitalocean-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-digitalocean-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-dnsimple-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-dnsimple-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-dnsimple-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-dnsmadeeasy-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-dnsmadeeasy-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-dnsmadeeasy-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-gehirn-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-gehirn-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-gehirn-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-google-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-google-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-google-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-linode-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-linode-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-linode-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-luadns-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-luadns-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-luadns-doc libraries | https://github.com/certbot/certbot - dnf - python-certbot-dns-nsone-doc - 5.4.0-1.fc45: normalized package name match | Fedora Rawhide package metadata: python-certbot-dns-nsone-doc from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/13ee7b80cb813542594d4235c4a0b8695435d5ecf23dd3580bc7515ae1b6180d-primary.xml.zst | Documenation for python-certbot-dns-nsone-doc libraries | https://github.com/certbot/certbot ## Related Links - [Secret-risk packages](https://www.automicvault.com/ja/pkg/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://www.automicvault.com/ja/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/ja/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://www.automicvault.com/ja/pkg/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [python@3.14](https://www.automicvault.com/ja/pkg/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [augeas](https://www.automicvault.com/ja/pkg/brew/augeas/) - Runtime dependency declared by Homebrew. - [mkcert](https://www.automicvault.com/ja/pkg/brew/mkcert/) - Shares av.db curated category or tags: certificates, cli, https, security, tls. - [lego](https://www.automicvault.com/ja/pkg/brew/lego/) - Shares av.db curated category or tags: acme, certificates, cli, letsencrypt, security. - [showcert](https://www.automicvault.com/ja/pkg/brew/showcert/) - Shares av.db curated category or tags: certificates, cli, letsencrypt, security, tls. - [acme.sh](https://www.automicvault.com/ja/pkg/brew/acme-sh/) - Shares av.db curated category or tags: acme, certificates, cli, letsencrypt, security. - [certigo](https://www.automicvault.com/ja/pkg/brew/certigo/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [crip](https://www.automicvault.com/ja/pkg/brew/crip/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [minica](https://www.automicvault.com/ja/pkg/brew/minica/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [certstrap](https://www.automicvault.com/ja/pkg/brew/certstrap/) - Shares av.db curated category or tags: certificates, cli, security, tls. - [dnsrobocert](https://www.automicvault.com/ja/pkg/brew/dnsrobocert/) - Both packages touch the same language runtime or ecosystem. Shared terms: acme, certifi, certificates, cli, cryptography. ## Sources - Nucleus package database - Geiger risk classifier - secret-handling manifest - local coverage README - package-page enrichment - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer