今天把证书换到Let’s Encrypt了，Super Easy. 1. git clone https://github.com/letsencrypt/letsencrypt 2. ./letsencrypt-auto certonly -d domain.tld，然后提醒写一个常用email就好了 3. 配置一下Nginx， 下面是Nginx配置中的证书部分 ssl_certificate /etc/letsencrypt/live/domain.tld/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/domain.tld/privkey.pem;