Notes

Ujnotes — CC0 1.0

Notes: Primary domain (CN), renew, Try to renew, Apache, and Primary domain (CN) First -d .

https://github.com/certbot/certbot

Obtains and installs SSL certificate from Letsencrypt.

Primary domain (CN)

Primary domain (CN) First -d <primary-domain>

/etc/letsencrypt/

live/<cert-directory>/<cert-files> sym-link ../archive/<cert-directory>/<index>/

Files hare are full chain.

Can be used to create standalone.

Renew.

renew

renew --dry-run

Try to renew

Try to renew --pre-hook <>

Try to renew --post-hook <>

Run only it renew attempted.

Apache

Apache certbot-auto --apache -d <primary> [-d <secondary>]...

Tomcat.

openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -CAfile chain.pem -caname root -out fullchain_and_key.p12 -name tomcat