1. make a folder mkdir -p /var/www/html/.well-known/acem-challenge 2. change nginx setting for getting auth files vi /etc/nginx/sites-enabled/default location /.well-known { root /var/www/html; allow all; } nginx -s stop nginx 3. generate auth files cd /usr/local/bin * https://certbot.eff.org/all-instructions/ wget https://dl.eff.org/certbot-auto chmod +x certbot-auto certbot-auto certonly -a webroot --webroot-path=/var/www/html -d nagios.topzone.com * certbot-auto certonly -a webroot --webroot-path=/var/www/html -d ldap.topzone.com -d ganglia.topzone.com -d nagios.topzone.com Do you want to continue? [Y/n] y Enter email address: doogee323@gmail.com (A)gree/(C)ancel: A (Y)es/(N)o: N IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/nagios.topzone.com/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/nagios.topzone.com/privkey.pem openssl dhparam -out