acme.sh

//install acme.sh
curl https://get.acme.sh | sh

acme.sh —issue -d xxx.com —webroot /var/www/html/

mkdir /etc/nginx/ssl

acme.sh —installcert -d xxx.com \
—key-file /etc/nginx/ssl/virsn.19850120.xyz.key \
—fullchain-file /etc/nginx/ssl/fullchain.cer \
—reloadcmd “service nginx force-reload”