How to create a SSL certificate

Create a ssl certificate
./certbot-auto –apache certonly

Location of the ssl certificates
/etc/letsencrypt/live/your-domain-name/privkey.pem
/etc/letsencrypt/live/your-domain-name/fullchain.pem

How to generate the Keys

How to generate a new account keypair using openssl. Generate an account private key if you don’t have one. KEEP ACCOUNT.KEY SECRET And then print your public key. Copy and paste the public key into the box of gethttpsforfree.com (step 1).

openssl genrsa 4096 > account.key
openssl rsa -in account.key -pubout

Generate a TLS private key if you don’t have one. KEEP DOMAIN.KEY SECRET!. Generate a CSR for your the domains you want certs for. Replace “test.com” with your domain name. Copy and paste the CSR into the box of gethttpsforfree.com (step 2)

Linux openssl genrsa 4096 > domain.key
openssl req -new -sha256 -key domain.key -subj “/” -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf “[SAN]\nsubjectAltName=DNS:test.com,DNS:www.test.com”))