Generate Wildcard Certificates using letsencrypt

Vasu Vanka
1 min readMar 28, 2021

Hello guys, it been a long but today I came up with one of the challenging posts.

Secure data transmission of a website by serving over HTTPS using SSL Certificates generated by letsencrypt.

Follow the below steps to generate wildcard certificates for your domain.Here am using tigerfit.in as my domain.

  1. install certbot on your machine
  2. validate certbot installation by running certbot -v

3. sudo certbot certonly — manual -d *.tigerfit.in -d tigerfit.in — agree-tos — no-bootstrap — manual-public-ip-logging-ok — preferred-challenges dns-01 — server https://acme-v02.api.letsencrypt.org/directory

4. Please deploy a DNS TXT record under the name

_acme-challenge.tigerfit.in with the following value:

hmkK*****************************************

5. Goto domain name control dashboard add TXT record with Name: _acme-challenge Value: hmkK*****************************************

6. Please deploy a DNS TXT record under the name

_acme-challenge.tigerfit.in with the following value:

Mtz*******************************************

Add second TXT record to your domain.

7. check your TXT record available by using DNS lookup

nslookup -q=txt tigerfit.in

8. On Successful verification you will find

IMPORTANT NOTES:

- Congratulations! Your certificate and chain have been saved at:

/etc/letsencrypt/live/tigerfit.in/fullchain.pem

Your key file has been saved at:

/etc/letsencrypt/live/tigerfit.in/privkey.pem

Your cert will expire on 20XX–01–26. To obtain a new or tweaked

version of this certificate in the future, simply run certbot

again. To non-interactively renew *all* of your certificates, run

“certbot renew”

- If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let’s Encrypt: https://letsencrypt.org/donate

Donating to EFF: https://eff.org/donate-le

Hola, SSL Certs are ready to configure on your fav web server.

--

--