Manually generating LetsEncrypt certificate
In cases where you don't want to disrupt current production server, this is a good approach
1mkdir /opt/letsencrypt
2cd /opt/letsencrypt
3wget https://dl.eff.org/certbot-auto
4chmod a+x certbot-auto
5sudo ./certbot-auto --apache certonly
Sample run as follows:
1[root@687elmp01 letsencrypt]# sudo ./certbot-auto --apache certonly
2Saving debug log to /var/log/letsencrypt/letsencrypt.log
3Plugins selected: Authenticator apache, Installer apache
4Enter email address (used for urgent renewal and security notices) (Enter 'c' to
5cancel): me@example.com
6
7-------------------------------------------------------------------------------
8Please read the Terms of Service at
9https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
10agree in order to register with the ACME server at
11https://acme-v01.api.letsencrypt.org/directory
12-------------------------------------------------------------------------------
13(A)gree/(C)ancel: A
14
15-------------------------------------------------------------------------------
16Would you be willing to share your email address with the Electronic Frontier
17Foundation, a founding partner of the Let's Encrypt project and the non-profit
18organization that develops Certbot? We'd like to send you email about EFF and
19our work to encrypt the web, protect its users and defend digital rights.
20-------------------------------------------------------------------------------
21(Y)es/(N)o: Y
22
23Which names would you like to activate HTTPS for?
24-------------------------------------------------------------------------------
251: example.com
262: api.example.com
273: manage.example.com
284: new.example.com
295: api.new.example.com
306: manage.new.example.com
317: www.example.com
32-------------------------------------------------------------------------------
33Select the appropriate numbers separated by commas and/or spaces, or leave input
34blank to select all options shown (Enter 'c' to cancel): 1 7
35Obtaining a new certificate
36Performing the following challenges:
37http-01 challenge for example.com
38http-01 challenge for www.example.com
39Waiting for verification...
40Cleaning up challenges
41
42IMPORTANT NOTES:
43 - Congratulations! Your certificate and chain have been saved at:
44 /etc/letsencrypt/live/example.com/fullchain.pem
45 Your key file has been saved at:
46 /etc/letsencrypt/live/example.com/privkey.pem
47 Your cert will expire on 2018-08-29. To obtain a new or tweaked
48 version of this certificate in the future, simply run certbot-auto
49 again. To non-interactively renew *all* of your certificates, run
50 "certbot-auto renew"
51 - Your account credentials have been saved in your Certbot
52 configuration directory at /etc/letsencrypt. You should make a
53 secure backup of this folder now. This configuration directory will
54 also contain certificates and private keys obtained by Certbot so
55 making regular backups of this folder is ideal.
56 - If you like Certbot, please consider supporting our work by:
57
58 Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate
59 Donating to EFF: https://eff.org/donate-le
Some details in https://certbot.eff.org/lets-encrypt/centos6-apache.html