reference document : 參考文章

certbot certonly --manual --agree-tos -d "*.zhtw.com" -d zhtw.com --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory

list certificates in system

certbot certificates

you have to add two TXT records _acme-challenge in your dns server setting file

每天執行一次指令  假如過期就會更新  憑證

certbot renew

也可以手動執行, 沒過期30天內   不會更新