Everyone&#x27;s recommending their favourite alternative. Mine is simp_le[1], a very simple ACME python client. It only supports the http challenge. You can run it without root (I have a dedicated user generally), without stopping your webserver. You only need to allow write access to domain&#x2F;.well-known&#x2F;acme-challenge.<p>Write a simple wrapper script and run it from cron. You get precisely the certificates needed for Apache or nginx. All that&#x27;s left is to symlink them to the right spot.<p>Let&#x27;s Encrypt follows all redirects and ignores expired certificates so if you have multiple domains redirecting to one, you can get a certificate for all of them in one go even if your certificate expired. You can create a SAN certificate or multiple certificates in whatever constellation you like.<p>SSL bliss.<p>[1] <a href="https:&#x2F;&#x2F;github.com&#x2F;kuba&#x2F;simp_le" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;kuba&#x2F;simp_le</a>