certbot

certbot.sh

# manual
certbot --help all

# Add Certbot PPA
sudo apt-get update -y
sudo apt-get install -y software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update -y 

# install certbot
sudo apt-get install -y certbot

# cert creation / challenge
# various challenge method
sudo certbot certonly --standalone
sudo certbot --manual --preferred-challenges dns certonly -d <domain-name>

# Test automatic renewal
# If you needed to stop your webserver to run Certbot, 
# you'll want to edit the built-in command to add the --pre-hook and --post-hook flags to stop and start 
# your webserver automatically. For example, if your webserver is HAProxy, 
# add the following to the certbot renew command:
sudo certbot renew --dry-run [--pre-hook "service haproxy stop" --post-hook "service haproxy start"]