@pertho

I used the template, updating the domain in question

root@my.domain.com# sed 's/example.com/my.domain.com/' /etc/examples/acme-client.conf > /etc/acme-client.conf

which has both the dev & production API endpoint URLs in it. I uncommented out the "sign with letsencrypt-staging" and commented out the "sign with letsencrypt-staging" for testing

# acme-client my.domain.com
# rcctl restart httpd

and then reversed the commenting back once I'd gotten the bogus test-cert. And then deleted the bogus certs 😆

# rm /etc/ssl/my.domain.com.fullchain.pem /etc/ssl/private/my.domain.com.key
$ acme-client my.domain.com
$ rcctl restart httpd