SHELL

generate ssl certbot nginx

$ sudo certbot --nginx -d example.com -d www.example.com

renew ssl certbot nginx

$ sudo certbot renew --dry-run

nginx ssl with certbot

certbot --nginx --redirect --agree-tos --no-eff-email -d oneclick.example.com -m admin@example.com
// or 
sudo certbot certonly --nginx