Forrest logo
back to the certbot tool

certbot:tldr:d4613

certbot: Obtain an untrusted test certificate instead.
$ sudo certbot --webroot --webroot-path ${path-to-webroot} --domain ${subdomain-example-com} --test-cert
try on your machine

This command is using the Certbot tool with sudo (which provides administrative privileges) to generate a test SSL certificate for a specific subdomain (--domain) using the webroot method (--webroot).

Here is the breakdown of the command:

  • sudo: This is a command used in Unix-like operating systems to run a command with administrative privileges. It allows Certbot to execute commands that require elevated permissions.

  • certbot: Certbot is a command-line tool used to obtain and manage SSL certificates from the Let's Encrypt certificate authority. In this case, it is being used to generate an SSL certificate.

  • --webroot: This flag specifies the method to use for obtaining the SSL certificate. The webroot method requires you to place a specific file in the webroot directory of your subdomain to prove domain ownership.

  • --webroot-path ${path-to-webroot}: This option sets the webroot path where the required verification file will be placed. You need to replace ${path-to-webroot} with the actual directory path on your system.

  • --domain ${subdomain-example-com}: This option specifies the domain (subdomain) for which the certificate will be generated. You need to replace ${subdomain-example-com} with the actual subdomain name.

  • --test-cert: This flag tells Certbot to generate a test certificate instead of a live, production-ready certificate. Test certificates have a shorter validity period and are useful for testing purposes or setting up initial configurations.

By running this command with the appropriate parameters, Certbot will verify domain ownership and generate a test SSL certificate for the specified subdomain using the webroot method.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the certbot tool