Entrust PKI as a Service

Setting REQUESTS_CA_BUNDLE

The ACME service uses a publicly anchored TLS certificate for trust, preconfigured in many ACME clients. If your client lacks this configuration, you can instruct Certbot to trust the root CA certificates by setting the REQUESTS_CA_BUNDLE environment variable to the file path that contains these certificates.

Platform Command Example
Linux export REQUESTS_CA_BUNDLE=<root-CA-cert-file> export REQUESTS_CA_BUNDLE=/tmp/root_ca.crt
Windows set REQUESTS_CA_BUNDLE=<root-CA-cert-file> set REQUESTS_CA_BUNDLE="C:\root_ca.crt"