Let’s Encrypt is a certificate authority that provides free X.509 certificates for TLS. It’s a very good solution for securing websites and other services exposed to the world. The weak point of this service is the need to renew certificate every 90 days. Here it comes to help Certbot.
step.1. installation
dnf install certbot python3-certbot-apache
step.2. firewall configuration
firewall-cmd --add-service=http firewall-cmd --add-service=http --permanent
step.3. get the certificate
certbot certonly --apache