The days of paying $250/year for a certificate are over. The Urge to build your own self-signed certificate (that only works for your own browser) are gone. Trying to work without a certificate, and having every browser flag your site as bad…
Enter Let’s Encrypt — First thing you need to down load certbot from https://letsencrypt.org/ Simplest way is to say that you’re running your own (Linux) server and you’re running Apache web server. Once you have Apache set to serve your domain(s) using regular HTTP (port 80), you just need to run certbot --apache or certbot --apache certonly Assuming your DNS ios set up correctly, and your apache is open, this should ytield you certificates that are valid. You can safely use the ECDSA type certificates (as opposed to older RSA type certificates), as one certificate will server multiple domains.
Now if you have all your ECDSA certificates in one certificate and you want all your site certificates to be refreshed at as they age, you need to add them to