https免费证书申请certbot，nginx

官网：https://certbot.eff.org/

下载：

wget https://dl.eff.org/certbot-auto

chmod a+x certbot-auto

./certbot-auto certonly  -d  *.xxxxx.com --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

完成后存储路径：/etc/letsencrypt

配置nginx：

ssl_certificate /etc/letsencrypt/live/xxx.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xxx.com/privkey.pem;