Let's encrypt.

Update

目前 acme-sh 默认使用 zerossl 证书。zerossl 支持域名证书、泛域名证书以及 IP 证书。

Install

curl https://get.acme.sh | sh

Install location: ~/.acme.sh

Get cert manually

cd ~/.acme.sh

./acme.sh  -d pandaafc.sagan.me -d *.pandaafc.sagan.me --dns --issue --yes-I-know-dns-manual-mode-enough-go-ahead-please

# add dns text records
# and wait it take effect

./acme.sh  -d pandaafc.sagan.me -d *.pandaafc.sagan.me --dns --issue --yes-I-know-dns-manual-mode-enough-go-ahead-please --renew

# cert download to 
# /root/.acme.sh/<domain>
# ca.cer
# <domain>.cer
# <domain>.csr
# <domain>.key
# fullchain.cer
# <domain>.conf
# <domain>.csr.conf