creating wildcard on letsencrypt

response.md

$ ./runCertBot.sh Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator manual, Installer None Obtaining a new certificate Performing the following challenges: dns-01 challenge for tyrellcsenyc.com

---

NOTE: The IP of this machine will be publicly logged as having requested this certificate. If you're running certbot in manual mode on a machine that is not your server, please ensure you're okay with that.

Are you OK with your IP being logged?

---

(Y)es/(N)o: y

---

Please deploy a DNS TXT record under the name _acme-challenge.tyrellcsenyc.com with the following value:

PsN0JgfXZ0We0yymYFHH92hz-V4kEmWqhAc6PXzJju0

Before continuing, verify the record is deployed.

---

Press Enter to Continue Waiting for verification... Cleaning up challenges

IMPORTANT NOTES:

• Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/tyrellcsenyc.com/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/tyrellcsenyc.com/privkey.pem Your cert will expire on 2019-12-13. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew all of your certificates, run "certbot renew"

• If you like Certbot, please consider supporting our work by:

  Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le

runCertbot.sh

docker run -it --rm -v $(pwd)/letsencrypt:/etc/letsencrypt \
    certbot/certbot certonly \
    --manual  --preferred-challenges dns \
    -d *.tyrellcsenyc.com -d tyrellcsenyc.com
    # -d *.cluster1.tyrellcsenyc.com
    # —-manual \
    # -—preferred-challenges dns \
    # —m [email protected] \
    # # —-server https://acme-v02.api.letsencrypt.org/directory \
    # —-agree-tos \
    # --dry-run