skills.rest
billyfranklim1
billyfranklim1COMMUNITY
Explore all skills by this author →
Website𝕏@billyfranklim1GitHub

ssl-certificates

Automate Let's Encrypt certificate issuance and renewal via certbot with Cloudflare DNS-01 validation.

Updated Mar 7, 2026
Search Tags:#cloudflare#nginx#ssl#certbot#letsencrypt#dns-01#wildcard
One-click install
npx skills add https://github.com/billyfranklim1/claude-skills --skill ssl-certificates
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssl-certificates
Source: https://github.com/billyfranklim1/claude-skills/tree/main/plugins/ssl-certificates/skills/ssl-certificates
Command: npx skills add https://github.com/billyfranklim1/claude-skills --skill ssl-certificates

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manage and recover TLS certificates for web domains so sites remain securely reachable, covering issuance, renewal failures, wildcard challenges, and common Nginx SSL errors when Cloudflare proxying is involved.

Core Features & Use Cases

  • Let's Encrypt issuance: Guide through certbot workflows for standard and wildcard certificates using DNS-01 validation.
  • Auto-renewal and recovery: Diagnose and repair failed certbot renewals, and configure reliable scheduled renewal (cron/systemd) and monitoring.
  • Cloudflare DNS integration: Handle API-driven DNS-01 challenges for wildcard subdomains and account for Cloudflare proxy behavior that can interfere with HTTP validation.
  • Nginx troubleshooting: Walk through common SSL handshake failures, mixed content, HSTS issues, and configuration fixes to restore HTTPS.
  • Use Case: Provision a wildcard preview certificate via Cloudflare DNS-01 for *.preview.example.com, enable auto-renewal, and resolve an expired certificate causing Nginx handshake errors.

Quick Start

Obtain and install a Let's Encrypt certificate for your domain via certbot using Cloudflare DNS-01 validation and configure automatic renewals so Nginx serves HTTPS continuously.

Frequently Asked Questions about ssl-certificates

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Let's Encrypt certificate issuance and renewal with certbot?▼

Automate Let's Encrypt certificate issuance and renewal by configuring certbot workflows with DNS-01 validation, then scheduling reliable automatic renewals via cron or systemd so Nginx serves HTTPS continuously.

Why does certbot DNS-01 validation fail when Cloudflare proxying is enabled?▼

Cloudflare proxy behavior interferes with HTTP validation, causing DNS-01 challenges to fail. Use the Cloudflare API for DNS-01 validation instead, which handles wildcard subdomains and bypasses proxy interference for successful certificate issuance.

How do I get a wildcard certificate for *.preview.example.com using Let's Encrypt?▼

Obtain a wildcard certificate for *.preview.example.com by using certbot with DNS-01 validation and the Cloudflare API. This method drives the required DNS record updates automatically to satisfy Let's Encrypt challenges.

Can I fix Nginx SSL handshake errors caused by an expired certificate?▼

Fix Nginx SSL handshake errors from expired certificates by diagnosing and repairing failed certbot renewals, then applying configuration fixes for mixed content and HSTS to restore secure HTTPS connectivity.

What's the best way to troubleshoot failed certbot renewals on Nginx?▼

Troubleshoot failed certbot renewals on Nginx by diagnosing SSL handshake failures, mixed content, and HSTS issues. Configure reliable scheduled renewal monitoring via cron or systemd to prevent future expiration disruptions.

Do I need a Cloudflare API token to issue wildcard certificates with certbot?▼

Yes, issuing wildcard certificates with certbot requires a Cloudflare API token for DNS-01 validation. The API token allows automated DNS record updates needed to satisfy Let's Encrypt wildcard challenges and support auto-renewal.

Related Skills

Explore More Software Engineering Skills→
L3DigitalNetL3DigitalNet
6

certbot

Manage TLS certificate lifecycle with Certbot ACME client for Let's Encrypt.

Official
Intermediate
MysticRyuujinMysticRyuujin
1

nginx

Terminate TLS and proxy traffic to upstream backends with nginx.

Community
Advanced
mqzkimmqzkim

cloudflare

Automate Cloudflare domain registration, DNS configuration, and SSL verification via Playwright.

Community
Advanced
BagelHoleBagelHole
46

ssl-tls-management

Manage SSL/TLS certificates with Let's Encrypt, Certbot, and cert-manager.

Community
Intermediate