Web / Caddy Server Interview questions
List the certificate authorities Caddy can obtain TLS certificates from?
Caddy is not tied to a single CA - its automatic HTTPS is built on the ACME protocol, so it can work with any CA that speaks ACME, and it ships with sensible defaults out of the box.
| CA | Role |
| Let's Encrypt | Default primary CA for public certificates. |
| ZeroSSL | Default fallback CA if Let's Encrypt issuance fails. |
| Internal CA (tls internal) | Caddy's own local CA for development and testing without a public domain. |
| Custom ACME CA | Any ACME-compliant CA (e.g. a private enterprise CA) set via the acme_ca global option. |
Switching CAs is usually one line, such as acme_ca https://acme.example.com/directory in the global options block, which is common in enterprises running an internal ACME server like step-ca.
More Related questions...