certbot

The Let's Encrypt Agent for automatically obtaining and renewing TLS certificates. Successor to letsencrypt. More information: <https://certbot.eff.org/docs/using.html>.

Install

All systems
curl cmd.cat/certbot.sh
Debian Debian
apt-get install certbot
Ubuntu
apt-get install certbot
Alpine
apk add certbot
Arch Arch Linux
pacman -S certbot
image/svg+xml Kali Linux
apt-get install certbot
Fedora
dnf install certbot
Windows (WSL2)
sudo apt-get update sudo apt-get install certbot
OS X
brew install certbot
Raspbian
apt-get install certbot
Dockerfile
dockerfile.run/certbot
Docker
docker run cmd.cat/certbot certbot powered by Commando

The Let's Encrypt Agent for automatically obtaining and renewing TLS certificates. Successor to letsencrypt. More information: <https://certbot.eff.org/docs/using.html>.

  • Obtain a new certificate via webroot authorization, but do not install it automatically:
    sudo certbot certonly --webroot --webroot-path path/to/webroot --domain subdomain.example.com
  • Obtain a new certificate via nginx authorization, installing the new certificate automatically:
    sudo certbot --nginx --domain subdomain.example.com
  • Obtain a new certificate via apache authorization, installing the new certificate automatically:
    sudo certbot --apache --domain subdomain.example.com
  • Renew all Let's Encrypt certificates that expire in 30 days or less (don't forget to restart any servers that use them afterwards):
    sudo certbot renew
  • Simulate the obtaining of a new certificate, but don't actually save any new certificates to disk:
    sudo certbot --webroot --webroot-path path/to/webroot --domain subdomain.example.com --dry-run
  • Obtain an untrusted test certificate instead:
    sudo certbot --webroot --webroot-path path/to/webroot --domain subdomain.example.com --test-cert

© tl;dr; authors and contributors