posh-acme.ps1

# Posh-ACME is for getting Let's Encrypt certificates

# Install for all users (requires elevation)
Install-Module -Name Posh-ACME -Scope AllUsers

# Get a wildcard cert
$domain = Read-Host 'Domain'
$certNames = "*.$domain", $domain
$email = "admin@$domain"
$pArgs = @{} # TODO

# Generate a certificate using manual DNS verification
# By default, certs are written to subfolders of $env:LOCALAPPDATA\Posh-ACME\acme-v02.api.letsencrypt.org
# By default, the PFX file's password is poshacme
New-PACertificate $certNames -AcceptTOS -Contact $email

# Or generate a certificate, using the name.com DNS plugin for DNS verification
New-PACertificate $certNames -AcceptTOS -Contact $email -DnsPlugin NameCom -PluginArgs $pArgs