As clarification: A poll for a new certificate could then be as simple as &quot;sign the CSR with the key, do a POST to their URL with the CSR in the form data, get the results back&quot;.<p>Not necessarily – obviously, many other approaches would work, too – but having to run a webserver to get it approved, and move files around, etc, makes the process a bit bothersome if one wants to automate it without giving the script access to the webserver, or doesn’t want to run one.<p>EDIT: Obviously, I have to be missing something, right? What’s the error in my concept? I mean, if it was that simple, they’d have already implemented it.