Let's Encrypt (Certificate Authority) Reference
Kip Landergren
(Updated: )
Contents
certbot
Commands
sudo certbot certonly \
--dns-google \
--dry-run \
-d example.com \
-d '*.example.com'
Frequently Asked Questions (FAQs)
Where does certbot write files?
For debian:
/etc/letsencrypt/live/example.com/fullchain.pem/etc/letsencrypt/live/example.com/privkey.pem
Are certificates revoked when a new one is generated?
No. Certificates must be manually revoked.
Can I just delete the certificate files directly?
Prefer using certbot delete.
How are certificates renewed?
Via command certbot renew, typically added to /etc/crontab. Note: this will not show up when invoking crontab -l, which is for the current user.