Thanks for checking it out! Yeah, it's really just a matter of documenting the API ;-) Unfortunately it does rely on being able to receive an email, as this i

Thanks for checking it out! Yeah, it's really just a matter of documenting the API ;-) Unfortunately it does rely on being able to receive an email, as this is a requirement of virtually all certificate authorities, though the email address in the whois record is also an option (at least for TLDs which list the email in whois). I have some ideas to make this easier for users who don't otherwise receive mail at their domains, such as by letting them point their MX record at sslmate. A configurable $ limit on /buy is a very good idea; also I should make it possible for users to use sslmate without permanently storing their API credentials on the filesystem.