Questions for certificate renewal


My operating system is (include version): OpenBSD 6.0
My web server is (include version): Nginx


I’m trying to make certificates renewed automatically and I have a .conf file that looks like that

version = 0.8.1
cert = /etc/letsencrypt/live/
privkey = /etc/letsencrypt/live/
fullchain = /etc/letsencrypt/live/
chain = /etc/letsencrypt/live/
//archive_dir = /etc/letsencrypt/archive/

// Options used in the renewal process
authenticator = webroot
//rsa_key_size = 4096
installer = None
account = 04xxxxxxxxxxxxxxxxxxxxb
//account = 8xxxxx6
server =
//server =
email =
webroot_path = /var/www/htdocs
[[webroot_map]] = /var/www/htdocs

I would like to know what the fields “webroot_path =” and “[[webroot_map]] =” used for knowing that the verification string use this path
cat /var/www/letsencrypt/.well-known/acme-challenge/9CxxxxxxxxxxxxxxxxxxxxxxxxxxxxZ9CXMw


The webroot_path would be /var/www/letsencrypt, i.e., the path up to the /.well-known/ part.

The [[webroot_map]] would be in this case contain the same path, as you only have one.


hi @mikygee

You also seem to be pointing to the staging server. Is this intentional?

server =



Thank you Osiris and Ahaw
Yes it’s normal because I’m doing tests, if I’m doing too many tests on production Letsencrypt bans me for a few days.


This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.