Letsencrypt

manually generate ssl certificate

certbot certonly --manual -d <domain1.tld> -d <domain2.tld> -d <and-son-on>

certbot certonly without manual intervention

certbot certonly --dns-route53 -d <domain> --register-unsafely-without-email --agree-tos

How to install certbot-rotue53

sudo apt install python3-pip pip3 install certbot-dns-route53

certbot dns

certbot certonly -d api-gateway.abcd.xyz --preferred-challenges dns-01 --manual --register-unsafely-without-email --agree-tos

Ref: https://medium.com/@pi_45757/generate-a-lets-encrypt-certificate-using-certbot-and-dns-validation-47b41ab012d7

This certificate will not be renewed automatically. Autorenewal of --manual certificates requires the use of an authentication hook script (--manual-auth-hook) but one was not provided. To renew this certificate, repeat this same certbot command before the certificate's expiry date.