====== Automatic generate / renew Let's Encrypt certificates ======
Install certbot.
yum install python2-certbot-apache
Setup the VirtualHost *:80 entry in your apache configuration for domain.com.
This will generate the certificates and the file domain.com-le-ssl.conf with the VirtualHost *:443 configuration for domain.com.
certbot --apache -d domain.com
Check which certificates were generated.
certbot certificates
To auto renew the certificate, check if the cron timer was installed (on some OS it may not):
systemctl status certbot.timer
If the previous timer was not found, we can add a cron job.
This will renew (if necessary - it will check first) all apache certificates deployed with let's encrypt.
sudo crontab -e
0 0,12 * * * root certbot -q renew --apache