Certbot cheatsheet

Generate certificate, agree to TOS, skip email during register

certbot certonly --agree-to --register-unsafely-without-email

Same as above, but pass domains as an argument

certbot certonly --agree-tos  --register-unsafely-without-email --domains 'example.com,www.example.com'

Renew all certificates

certbot renew

Renew only specific certificate

certbot renew --cert-name <CERT-NAME>

Perform a dryrun renewal, with webroot authentication option

certbot renew --dry-run --webroot --webroot-path /var/www/html/

Perform a dryrun renewal of given certificate, with webroot authentication option

certbot renew --cert-name example.com --webroot --webroot-path /path/to/new/location --dry-run

When dryrun is successful, renew the certificate

certbot renew --cert-name example.com --webroot --webroot-path /path/to/new/location

Add --force-renewal parameter, to renew certificate that is not due to expire

certbot renew --cert-name example.com --webroot --webroot-path /path/to/new/location --force-renewal

List certificates

certbot certificates

Revoke certificate

certbot revoke --cert-name <CERT-NAME>

Delete certificate

certbot delete --cert-name <CERT-NAME>