Skip to content
Maddes edited this page Apr 19, 2024 · 34 revisions

Update the Linux/BSD system with latest CA bundle and patches from System Update otherwise some issues may occur when generating your free SSL certificates. Once completed begin with the install procedure below.

  • CentOs: yum update ca-certificates
  • Debian: apt update ; apt install ca-certificates (updates package if already installed)
    also applies to Debian-based distros like Ubuntu, LinuxMint, etc.

1. Install from web:


curl | sh -s


wget -O - | sh -s

2. Or, install from GitHub:

curl | sh -s -- --install-online -m


wget -O - | sh -s -- --install-online -m

3. Or, git clone and install:

git clone --depth 1
./ --install -m

4. Advanced installation

git clone --depth 1
./ --install  \
--home ~/myacme \
--config-home ~/myacme/data \
--cert-home  ~/mycerts \
--accountemail  "" \
--accountkey  ~/myaccount.key \
--accountconf ~/myaccount.conf \
--useragent  "this is my client."

You don't need to set them all, just set those ones you care about.

Explanations :

  • --home is a customized dir to install in. By default, it installs into ~/
  • --config-home is a writable folder, will write all the files(including cert/keys, configs) there. By default, it's in --home
  • --cert-home is a customized dir to save the certs you issue. By default, it's saved in --config-home.
  • --accountemail is the email used to register an account to Let's Encrypt, you will receive a renewal notice email here.
  • --accountkey is the file saving your account private key. By default, it's saved in --config-home.
  • --useragent is the user-agent header value used to send to Let's Encrypt.
  • --nocron install without cronjob

5. Special case: Converting LE account data from certbot to

If already using certbot, then there is the possiblity to convert its LE account data to format. See .

If re-using the LE account created from certbot, then it is recommended not to specify -m/--email during installation.

Clone this wiki locally