Browsers have become cranky about websites that don’t have the https prefix.  This is a free SSL certificate that can be installed easily, but must be renewed each quarter.  The rewal can be done from the command line and added to the sudo crontab.

—> FIRST:  set up a URL for the server first and create A records to direct it to the server IP address, before installing the SSL certificate

NOTE:  Updated by KKC 4/11/2021.  Certbot is now included in the Ubuntu 18 repositories and should be installed using a normal apt-get process:

sudo apt-get update
sudo apt-get install certbot
sudo apt-get install python-certbot-apache

(the third line installs the apache plugin for certbot)

Certbot is now ready to use

Certificate Install Process

Note the example below associates the SSL with both the www form and non www form of the URL.  You can include as many subdomains as you want.

**sudo certbot --apache -d** *xxxxxxxxxxx.xxx* **-d** *www.xxxxxxxxxxxx.xxx*

Enter email address (used for urgent renewal and security notices) (Enter 'c' to

cancel): [email protected]


Please read the Terms of Service at

https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must

agree in order to register with the ACME server at

https://acme-v02.api.letsencrypt.org/directory


**(A)gree/(C)ancel: A**

Would you be willing to share your email address with the Electronic Frontier