Skip to content

@bmw bmw released this Dec 1, 2020 · 74 commits to master since this release


  • Added timeout to DNS query function calls for dns-rfc2136 plugin.
  • Confirmation when deleting certificates
  • CLI flag --key-type has been added to specify 'rsa' or 'ecdsa' (default 'rsa').
  • CLI flag --elliptic-curve has been added which takes an NIST/SECG elliptic curve. Any of
    secp256r1, secp284r1 and secp521r1 are accepted values.
  • The command certbot certficates lists the which type of the private key that was used
    for the private key.
  • Support for Python 3.9 was added to Certbot and all of its components.


  • certbot-auto was deprecated on Debian based systems.
  • CLI flag --manual-public-ip-logging-ok is now a no-op, generates a
    deprecation warning, and will be removed in a future release.


  • Fixed a Unicode-related crash in the nginx plugin when running under Python 2.
    More details about these changes can be found on our GitHub repo.
Assets 3
You can’t perform that action at this time.