1. wget https://dl.eff.org/certbot-auto

    

2. sudo mv certbot-auto /usr/local/bin/certbot-auto
3. sudo chown root /usr/local/bin/certbot-auto
4. sudo chmod 0755 /usr/local/bin/certbot-auto
5. /usr/local/bin/certbot-auto --help

域名
abllin.com
mmlstar.com
abllan.com

certbot-auto certonly --email [email protected] -d *.abllin.com -d *.mmlstar.com -d *.abllan.com --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory  

[root@world-alive:~]# certbot-auto certonly --email [email protected] -d abllin.com -d mmlstar.com -d abllan.com --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory
Creating virtual environment...
Installing Python packages...
Installation succeeded.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Obtaining a new certificate
Performing the following challenges:
dns-01 challenge for abllan.com
dns-01 challenge for abllin.com
dns-01 challenge for mmlstar.com

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
NOTE: The IP of this machine will be publicly logged as having requested this
certificate. If you're running certbot in manual mode on a machine that is not
your server, please ensure you're okay with that.

Are you OK with your IP being logged?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please deploy a DNS TXT record under the name
_acme-challenge.abllan.com with the following value:

-Cdad8rfreElz06iWx1FrNnTty1qHcAcbD76fPAPPBw

Before continuing, verify the record is deployed.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please deploy a DNS TXT record under the name
_acme-challenge.abllin.com with the following value:

jGlWAN3-2CrWuKKp-Tm0UDtM_CTyzIY4eYinmb9Py64

Before continuing, verify the record is deployed.
(This must be set up in addition to the previous challenges; do not remove,
replace, or undo the previous challenge tasks yet. Note that you might be
asked to create multiple distinct TXT records with the same name. This is
permitted by DNS standards.)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please deploy a DNS TXT record under the name
_acme-challenge.mmlstar.com with the following value:

miu6aw9TW0pZWStOsLUJ-FgesgR97snVq89VZlzy3Hg

Before continuing, verify the record is deployed.
(This must be set up in addition to the previous challenges; do not remove,
replace, or undo the previous challenge tasks yet. Note that you might be
asked to create multiple distinct TXT records with the same name. This is
permitted by DNS standards.)

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/abllin.com/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/abllin.com/privkey.pem
   Your cert will expire on 2020-09-03. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot-auto
   again. To non-interactively renew *all* of your certificates, run
   "certbot-auto renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le