Secure Apache with Let’s Encrypt on Debian 9

Let’s Encrypt is a certificate authority created by the Internet Security Research Group (ISRG). It provides free SSL certificates via fully automated process designed to eliminate manual certificate creation, validation, installation and renewal. Certificates issued by Let’s Encrypt are are valid for 90 days from the issue date and trusted by all major browsers today. This tutorial will guide you through the process of obtaining a free Let’s Encrypt using the certbot tool on Debian 9. We’ll also show how to configure Apache to use the new SSL certificate and enable HTTP/2.