Do you have a blog or site and want to get an SSL certificate for your site?
You found out that it's important for Google to have an SSL certificate on your site to count on Google results!

![free-ssl.png](https://steemitimages.com/DQmeUopNdPZ89XRjXQXocdDUhD25mqTFrEkE5ShdEtmnyYZ/free-ssl.png)

I'll show you how I did for my blog https://blog.ceae.info/ 

We found last year the project "<a href="https://letsencrypt.org/">Let's Encrypt</a>"
![Selection_015.jpg](https://steemitimages.com/DQmeC6YkgYBGL8XGSyhDGqBtAMksvGjdqazLvbSat36egc6/Selection_015.jpg)

It is a project supported by several corporations.   The list below !
![Selection_016.jpg](https://steemitimages.com/DQmPAbyMor9Lb41Hqvg6FXG5FbFPJ3uCTLuwRqAHNZ8ZXqo/Selection_016.jpg)

I have followed the explained steps for shell access because I have my own blog server, and I think it's the easiest way.
More information and explanations here https://letsencrypt.org/getting-started/

Even their recommendation is to use the shell access path, since you choose this path you are redirected to another site where you download an application https://certbot.eff.org/#centosrhel7-apache
In the above link I have already selected Apache with Centos 7.
Go to your server in the shell and write.
<pre>yum install certbot-apache</pre>

It installs what you need to put the SSL certificate.

Next step
<pre>certbot --authenticator webroot --installer apache</pre>

And that's it, you'll get a 3-month free certificate.
For renewal you only have to do the next step:
<pre>certbot renew --dry-run</pre>

<h2>Case 2 now</h2>
Let's say you have multiple sites on your server and you only want a SSL certificate for a site.
Step 1:  ( real example )
Execute the command:
<pre>certbot certonly --webroot -w /var/www/html/itsmartsystems.tk -d www.itsmartsystems.tk</pre>
Suppose we already installed certbot ( yum -y install certbot )
For the above case we want to for an ssl certificate for the www.itsmartsystems.tk domain.
The result after I run certbot:
<pre>
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for www.itsmartsystems.tk
Using the webroot path /var/www/html/itsmartsystems.tk for all unmatched domains.
Waiting for verification...
Cleaning up challenges

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/www.itsmartsystems.tk/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/www.itsmartsystems.tk/privkey.pem
   Your cert will expire on 2018-04-28. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le
</pre>

Now we need to edit the configuration file in VHOST.
vim /etc/httpd/conf.d/VHOSTS-le-ssl.conf 
<pre>
<  IfModule mod_ssl.c  >
<VirtualHost 172.41.1.100:443>
        <Directory /var/www/html/luconsult.tk>
                Order deny,allow
                Allow from all
                DirectoryIndex index.html
                Options +Indexes
        </Directory>
        ServerName www.itsmartsystems.tk
        ServerPath /itsmartsystems.tk
        DocumentRoot /var/www/html/itsmartsystems.tk
        CustomLog /var/log/httpd/isstk_access.log common
        ErrorLog /var/log/httpd/isstk_error.log
SSLCertificateFile /etc/letsencrypt/live/www.itsmartsystems.tk/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/www.itsmartsystems.tk/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
SSLCertificateChainFile /etc/letsencrypt/live/www.itsmartsystems.tk/fullchain.pem
</VirtualHost>
<  /IfModule  >
</pre>
After that, we restart the apache server.
<pre>systemctl restart httpd</pre>
You can see the result here: https://www.itsmartsystems.tk/

After the expiration of the certificate, we only have this step.
<pre>certbot renew</pre>

Enjoy and happy new day !

Source: https://certbot.eff.org/docs/using.html