[root@vm-01 ~]#dnf -y install epel-release Last metadata expiration check: 0:33:54 ago on Fri 06 Mar 2026 11:36:50 AM UTC. Dependencies resolved. Package Architecture Version Repository Size ========================= Installing: epel-release noarch 9-10.el9 extras 19 k
[root@vm-01 ~]#snap install certbot –classic 2026-03-06T11:46:01Z INFO Waiting for automatic snapd restart… Warning: /var/lib/snapd/snap/bin was not found in your $PATH. If you’ve not restarted your session since you installed snapd, try doing that. Please see https://forum.snapcraft.io/t/9469 for more details.
certbot 5.3.1 from Certbot Project (certbot-eff✓) installed
[root@vm-01 ~]#snap list Name Version Rev Tracking Publisher Notes certbot 5.3.1 5370 latest/stable certbot-eff✓ classic core24 20260107 1349 latest/stable canonical✓ base snapd 2.73 25935 latest/stable canonical✓ snapd
[root@vm-01 ~]#certbot certonly –manual -d www.example.com –preferred-challenges dns
Saving debug log to /var/log/letsencrypt/letsencrypt.log Enter email address or hit Enter to skip. (Enter 'c’ to cancel): メールアドレス(admin@example.com) # 管理者のメールアドレス
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Please read the Terms of Service at: https://letsencrypt.org/documents/LE-SA-v1.6-August-18-2025.pdf You must agree in order to register with the ACME server. Do you agree? – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – (Y)es/(N)o: Y # 規約同意の確認
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Would you be willing, once your first certificate is successfully issued, to share your email address with the Electronic Frontier Foundation, a founding partner of the Let’s Encrypt project and the non-profit organization that develops Certbot? We’d like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – (Y)es/(N)o: N# 案内メールの送信確認 Account registered. Requesting a certificate for www.example.com
– – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Please deploy a DNS TXT record under the name:
Before continuing, verify the TXT record has been deployed. Depending on the DNS provider, this may take some time, from a few seconds to multiple minutes. You can check if it has finished deploying with aid of online tools, such as the Google Admin Toolbox: https://toolbox.googleapps.com/apps/dig/#TXT/_acme-challenge.www.example.com. Look for one or more bolded line(s) below the line ';ANSWER’. It should show the value(s) you’ve just added.
Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/www.example.com/fullchain.pem Key is saved at: /etc/letsencrypt/live/www.example.com/privkey.pem This certificate expires on 2026-06-0X. These files will be updated when the certificate renews.
NEXT STEPS: – This certificate will not be renewed automatically. Autorenewal of –manual certificates requires the use of an authentication hook script (–manual-auth-hook) but one was not provided. To renew this certificate, repeat this same certbot command before the certificate’s expiry date.
https://www.tama-negi.com/2020/05/05/webapps-letsencrypt/
