使用Let's Encrypt申请通配符域名证书

wget https://dl.eff.org/certbot-auto

chmod u+x certbot-auto

./certbot-auto certonly -d "*.264.cn" --manual --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Please deploy a DNS TXT record under the name

_acme-challenge.264.cn with the following value:

u-Q2i5-KGE47HXlCcINaddICUB7nkAtUy7oAzL4O1vk

Before continuing, verify the record is deployed.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Press Enter to Continue

这里不要继续往下了，根据提示设置域名的 dns解析。

添加之后，不要心急着按回车，确认解析记录是否生效，生效之后再回去按回车确认

上面表示解析生效，按回车确认继续

Waiting for verification...

Cleaning up challenges

IMPORTANT NOTES:

- Congratulations! Your certificate and chain have been saved at:

/etc/letsencrypt/live/264.cn/fullchain.pem

Your key file has been saved at:

/etc/letsencrypt/live/264.cn/privkey.pem

Your cert will expire on 2019-03-16. To obtain a new or tweaked

version of this certificate in the future, simply run certbot-auto

again. To non-interactively renew *all* of your certificates, run

"certbot-auto renew"

- If you like Certbot, please consider supporting our work by:

Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate

Donating to EFF: https://eff.org/donate-le

出现以上界面说明配置成功，配置证书存放在 /etc/letsencrypt/live/tinywan.top/ 里面了

要续期的话，执行 certbot-auto renew 就可以了