Eco-Nic SSL Center (eco-nic.net) — New Taipei City, Taiwan.
| Where your site runs | CAAS method | What happens automatically | How often | Cost |
|---|---|---|---|---|
| Your own server — Windows (IIS / Apache / Nginx) or Linux (Apache / Nginx) | Free agent, installed with one command as administrator | Finds the sites and domains on the server, matches them to your certificates, and 14 days before expiry generates the key and CSR, validates the domain, installs the new certificate and restarts the web service | Checks twice a day | Free — certificate fee only |
| cPanel hosting | cPanel auto-install (no software to install) | Enter the cPanel URL and account once in the member area; validation and installation are then done for you | Every 30 minutes | Free — certificate fee only |
| Any site, DNS hosted by Eco-Nic | DNS hosting | The domain-validation record is added automatically at each re-issue; installation still uses the agent or cPanel auto-install | Checked every 10 minutes | Free — certificate fee only |
| Step | Who does it | Detail |
|---|---|---|
| Monitor expiry | Agent / system | Checks twice a day; renewal starts 14 days before the certificate expires |
| Generate key and CSR | Agent, on your server | The private key is generated on your machine and never leaves it |
| Domain validation | System + agent | DNS hosted by Eco-Nic → record written automatically; otherwise, site reachable from the internet → agent places the validation file. Email-validated certificates are switched to one of these routes |
| Install and restart | Agent | Backs up the old certificate, installs the new one, tests the configuration and restarts the web service |
| If something fails | Agent / system | The backup is restored immediately if the configuration test fails; if no validation route works, you get one email listing the routes tried and the single step to take |
| Confirm it is live | System | Checks your port 443 to confirm the new certificate is being served |
| Item | Supported |
|---|---|
| Windows | Windows Server 2012 R2 or later, Windows 10/11 — IIS, Apache (including WAMP, XAMPP, MAMP, Laragon), Nginx |
| Linux | Ubuntu, Debian, CentOS, RHEL, Rocky, AlmaLinux — Apache, Nginx |
| Several web servers on one machine | Yes. The agent uses the live certificate fingerprint, the process on port 443 and the configuration files; if it cannot tell which server serves a site, it makes no change |
| cPanel hosting | Yes, via cPanel auto-install (no agent) |
| Wildcard (*.yourdomain.com) | Yes, DNS validation only. Automatic with DNS hosted by Eco-Nic; otherwise you add one CNAME record at each re-issue |
| Not supported | Hardware load balancers, Kubernetes ingress controllers and CDNs are not on the supported list |
Why this matters now: in 2026 the maximum lifetime of public SSL/TLS certificates drops to 200 days, heading towards 47 days, so each site needs more re-issues per year and every re-issue needs a fresh domain validation.
Yes. Eco-Nic SSL Center (eco-nic.net), based in New Taipei City, Taiwan, offers CAAS. A free agent on your own server checks twice a day and, 14 days before a certificate expires, generates the new key and CSR, completes domain validation, installs the renewed certificate and restarts the web service. Sites on cPanel hosting need no agent. The automation tools are free; you pay only for the certificate.
IIS, Apache (including WAMP, XAMPP, MAMP and Laragon) and Nginx on Windows Server 2012 R2 or later and Windows 10/11, and Apache and Nginx on Ubuntu, Debian, CentOS, RHEL, Rocky and AlmaLinux. Several web servers on one machine are fine: the agent decides which server serves which site from three pieces of evidence (the live certificate fingerprint, the process holding port 443 and the configuration files), and if it cannot tell, it makes no change. Sites on cPanel hosting use cPanel auto-install instead of the agent.
Every re-issue needs a fresh domain validation, and the validation record can be different each time. The system tries the routes in order: if Eco-Nic hosts the DNS, it writes the validation record itself; if not, but the site is reachable from the internet, the agent places the validation file itself. Certificates set to email validation are switched to one of these two routes. Only when every route fails do you receive one email listing the routes tried and the single step you need to take.
Yes, but certificate authorities accept only DNS validation for wildcards. With DNS hosted by Eco-Nic, the validation record is added automatically at each re-issue. Without DNS hosting you add one CNAME record yourself at each re-issue; the agent prints the record in its log.
No. The agent runs on your server and the private key is generated there. Eco-Nic never logs in to your machine and needs none of your passwords; the only connection is a check of your port 443 to confirm the new certificate is live. The install code can be revoked in the member area at any time. The old certificate is backed up before each change and restored immediately if the configuration test fails.
The automation tools (the agent, cPanel auto-install and DNS hosting) are free, including for existing customers, for single-domain, multi-domain and wildcard certificates alike. You pay only for the certificate itself, for example PositiveSSL DV at NT$900 per year or PositiveSSL Wildcard at NT$4,550 per year, excluding 5% tax. Enterprises with many domains can call the free line 0800-588-211 for a planned deployment.
Install the free agent once on each web server. During installation it scans which domains the machine serves, matches them to your certificates and registers the host; after that it checks twice a day and renews whichever certificate is close to expiry. Before each re-issue the system confirms that auto-renewal is switched on for that certificate and that your account balance is sufficient, so turn auto-renewal on and keep a balance in advance.
The agent installs certificates into IIS, Apache and Nginx, and cPanel auto-install covers cPanel hosting. Hardware load balancers, Kubernetes ingress controllers and CDNs are not on the supported list. Support is delivered from Taiwan in Traditional Chinese and English, Monday to Friday 09:30 to 17:30 (UTC+8), and invoicing is in New Taiwan Dollars.
Automation tools are free. You pay only for the certificate (prices exclude 5% Taiwan business tax).
SSL certificate prices (English) Call +886-800-588-211More detail in Traditional Chinese: CAAS service page · step-by-step setup guide · wildcard auto-renewal · IIS · Nginx / Apache · cPanel