• With certbot use
  • –webroot to use an existing web server for the authentication process
  • –keep to only update if certificate needs to be renewed
  • certonly only saves a copy of the cert but does not update the apache config
  • -w the location of the webroot
  • -d the domain. can use multiple -d for multiple
certbot --webroot --no-self-upgrade --keep certonly -w /var/www/html -d gregp203.com

The certificates will be found in /etc/letsencrypt/live/your-domain.com