Managing a Website Certificate

sudo dnf install certbot

Creating a Certificate

sudo certbot certonly --manual -d cuneiform-lang.org,www.cuneiform-lang.org

The script will ask you to make a file available on the web server. The script provides you the locations of two information items: - fullchain.pem - privkey.pem

fullchain.pem contains two certificates. Store them in two separate files: cert.pem and ca.pem. View the content of the certificates using:

openssl x509 -in cert.pem -noout -text

Note that cert.pem is the certificate we want to set up and ca.pem is the upstream certificate that was used to create it.

Next, visit your web hoster (e.g., kis.hosteurope.de). Navigate to the upload dialog, e.g., - Produktverwaltung - Webhosting - Konfigurieren - Sicherheit und SSL - SSL konfigurieren

Make sure to have a global certificate. If necessary, override that global certificate.

Extending a Certificate

To view the available certificates enter

sudo certbot certificates

To renew an available certificate follow the exact same procedure as for creating a certificate.