graphene-os-server-infrastructure/certbot/ns1.staging.grapheneos.org

certbot certonly –webroot –webroot-path /srv/certbot –no-eff-email \ –key-type ecdsa –reuse-key –must-staple –preferred-chain "ISRG Root X1" \ –deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \ –cert-name ns1.staging.grapheneos.org \ -d ns1.staging.grapheneos.org \ -d ns2.staging.grapheneos.org \ -d ns1.staging.attestation.app \ -d ns2.staging.attestation.app