certbot certonly –webroot –webroot-path /srv/certbot –no-eff-email \
–key-type ecdsa –reuse-key –must-staple –preferred-chain "ISRG Root X1" \
–deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
–cert-name discuss.grapheneos.org \
-d discuss.grapheneos.org