Certbot SSL

certbot certonly --standalone --preferred-challenges http -d waspa.org.za
certbot --apache certonly
certbot renew --dry-run

You can delete an item from the Domains list by running certbot --cert-name xxxx.org -d xxxxx.com -d yyyy.org -d yyyy.com and omitting the item that you want to delete from the -d list.

## Actual use case to delete sphex and put all certs into one:

certbot --cert-name waspa.org.za -d accounts.waspa.org.za -d adjudicators.waspa.org.za -d api.waspa.org.za -d console.waspa.org.za -d forums.waspa.org.za -d imap.waspa.org.za -d lists.waspa.org.za -d login.waspa.org.za -d mail.waspa.org.za -d mancom.waspa.org.za -d new.waspa.org.za -d old.waspa.org.za -d pop.waspa.org.za -d portal.waspa.org.za -d prionyx.waspa.org.za -d reports.waspa.org.za -d smtp.waspa.org.za -d stats.waspa.org.za -d theme.waspa.org.za -d waspa.org.za -d webmail.waspa.org.za -d wiki.waspa.org.za -d www.waspa.org.za

New LetsEncrypt cert permissions for Debian-exim:

# Debian-exim has to have read permissions:

chmod 755 /etc/letsencrypt/{archive,live}; chgrp Debian-exim /etc/letsencrypt/{archive,live}