letsencrypt create/renew

letsencrypt.sh

# Create a certificate
sudo letsencrypt certonly --webroot \                                                                                        ~
  -w /srv/path/to/document/root \
  -d my.working.fqdn

# Help on renew. See Also: https://certbot.eff.org/docs/using.html#re-running-certbot
letsencrypt --help renew

# Update created certificates
sudo letsencrypt renew --agree-tos \
  --post-hook "nginx -s reload"