Repeat this option for all required names. In the meantime, do what you want with. Renew certificaat -m m cron This command can be integrated in an automated workflow. License Licensing terms will be revealed shortly. The local configuration file is stored in the project directory, and looks like this: :acme-uri :challenges http-01 :contact "mailto :domain :hooks :before-challenge :after-request, :organisation "ChangeMe corporation :san. Definition, certificaat is a general-purpose, aCME client, fully compatible with the, lets Encrypt. Org, the global configuration is stored in the root directory, and it looks like this: :key-size 2048, :key-type :rsa, :keypair-filename "y :plugins :diffie-hellman :enabled false, :filename "m :group14 true, :modulus 2048, :email :enabled false, :sendmail false, :smtp :host "angeme. Init certificaat -m init. By default, Certificaat will talk to Lets Encrypts staging server. Type certificaat -h to familiarize yourself with the input it expects. The resulting certificates will be fake. The email address used by the CA to send expiry reminders. Certificaat -m -n init, the -n option is for additional domain name you want to authorize. It will feature in the Subject name of the final.509 certificate. Installation, download the latest release, extract the archive and drop the self-contained binary in your path. The challenge you want to complete. Run certificaat -m run certificaat will display instructions pertaining to the challenge. Caution: there is a hard limit imposed by the. Diffie-Helman parameters This will save a Diffie-Helman parameters file along with the certificate, for further tuning the SSL setup. For as long as the authorizations remain valid, Note: With LetsEncrypt, cached authorizations last for 30 days from the time of validation.