LetsEncrypt

Import private cert to gain access to startssl tools. Or generate new.

www.halfface.se_startssl.p12

Validations Wizard

Domain name validation

Certificates Wizard

Web server ssl/tls Certificate

generate certicate for domain. Do not use csr.

Remove key from cert.

openssl rsa -in ssl.key -out www.halfface.se.key

toolbox Retrieve Certificate

save as www.halfface.se.crt

vim www.halfface.se.crt

apache config

SSLCertificateFile /etc/httpd/ssl/www.halfface.se.crt
SSLCertificateKeyFile /etc/httpd/ssl/www.halfface.se.key
SSLCertificateChainFile /etc/httpd/ssl/sub.class1.server.ca.pem
SSLCACertificateFile /etc/httpd/ssl/ca.pem