free SSL Certificate using letsencrypt.org

# wget https://github.com/Neilpang/acme.sh/archive/2.7.2.tar.gz
–2017-07-31 19:03:09– https://github.com/Neilpang/acme.sh/archive/2.7.2.tar.gz
Resolving github.com… 192.30.253.113, 192.30.253.112
Connecting to github.com|192.30.253.113|:443… connected.
HTTP request sent, awaiting response… 302 Found
Location: https://codeload.github.com/Neilpang/acme.sh/tar.gz/2.7.2 [following]
–2017-07-31 19:03:10– https://codeload.github.com/Neilpang/acme.sh/tar.gz/2.7.2
Resolving codeload.github.com… 192.30.253.121, 192.30.253.120
Connecting to codeload.github.com|192.30.253.121|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: unspecified [application/x-gzip]
Saving to: â2.7.2â

[ <=> ] 74,920 132K/s in 0.6s

2017-07-31 19:03:12 (132 KB/s) – â2.7.2â

# tar zxvf 2.7.2
acme.sh-2.7.2/
acme.sh-2.7.2/.github/
acme.sh-2.7.2/.github/ISSUE_TEMPLATE.md
acme.sh-2.7.2/.github/PULL_REQUEST_TEMPLATE.md
……
……
……
acme.sh-2.7.2/dnsapi/dns_pdns.sh
acme.sh-2.7.2/dnsapi/dns_vscale.sh
# cd acme.sh-2.7.2/
# ls
acme.sh deploy dnsapi Dockerfile README.md
# ./acme.sh –issue –apache -d www.nmlindia.org
[Mon Jul 31 19:03:55 IST 2017] Checking if there is an error in the apache config file before starting.
[Mon Jul 31 19:03:55 IST 2017] OK
[Mon Jul 31 19:03:55 IST 2017] JFYI, Config file /etc/httpd/conf/httpd.conf is backuped to /root/.acme.sh/httpd.conf
[Mon Jul 31 19:03:55 IST 2017] In case there is an error that can not be restored automatically, you may try restore it yourself.
[Mon Jul 31 19:03:55 IST 2017] The backup file will be deleted on success, just forget it.
[Mon Jul 31 19:03:57 IST 2017] Registering account
[Mon Jul 31 19:04:00 IST 2017] Registered
[Mon Jul 31 19:04:02 IST 2017] Update success.
[Mon Jul 31 19:04:02 IST 2017] ACCOUNT_THUMBPRINT=’ShhLMUZgwR2vEzn6tN1C1HyoPGv_1QjepkK2j5zSa9o’
[Mon Jul 31 19:04:02 IST 2017] Creating domain key
[Mon Jul 31 19:04:03 IST 2017] The domain key is here: /root/.acme.sh/www.nmlindia.org/www.nmlindia.org.key
[Mon Jul 31 19:04:03 IST 2017] Single domain=’www.nmlindia.org’
[Mon Jul 31 19:04:03 IST 2017] Getting domain auth token for each domain
[Mon Jul 31 19:04:03 IST 2017] Getting webroot for domain=’www.nmlindia.org’
[Mon Jul 31 19:04:03 IST 2017] Getting new-authz for domain=’www.nmlindia.org’
[Mon Jul 31 19:04:05 IST 2017] The new-authz request is ok.
[Mon Jul 31 19:04:05 IST 2017] Verifying:www.nmlindia.org
[Mon Jul 31 19:04:10 IST 2017] Success
[Mon Jul 31 19:04:10 IST 2017] Verify finished, start to sign.
[Mon Jul 31 19:04:13 IST 2017] Cert success.
—–BEGIN CERTIFICATE—–
……..
…….
hidden by bd for privacy
……
……
—–END CERTIFICATE—–
[Mon Jul 31 19:04:13 IST 2017] Your cert is in /root/.acme.sh/www.nmlindia.org/www.nmlindia.org.cer
[Mon Jul 31 19:04:13 IST 2017] Your cert key is in /root/.acme.sh/www.nmlindia.org/www.nmlindia.org.key
[Mon Jul 31 19:04:13 IST 2017] The intermediate CA cert is in /root/.acme.sh/www.nmlindia.org/ca.cer
[Mon Jul 31 19:04:13 IST 2017] And the full chain certs is there: /root/.acme.sh/www.nmlindia.org/fullchain.cer

# cp /root/.acme.sh/www.nmlindia.org/www.nmlindia.org.cer /etc/pki/tls/certs/www.crt
cp: overwrite `/etc/pki/tls/certs/www.crt’? y
# cp /root/.acme.sh/www.nmlindia.org/www.nmlindia.org.key /etc/pki/tls/private/www.key
cp: overwrite `/etc/pki/tls/private/www.key’? y
# cp /root/.acme.sh/www.nmlindia.org/fullchain.cer /etc/pki/tls/certs/intermediate.pem
cp: overwrite `/etc/pki/tls/certs/intermediate.pem’? y
# service httpd restart
Stopping httpd: [ OK ]
Starting httpd: [ OK ]
#