# Ssl Certificates

> Let's Encrypt, certbot, auto-renewal, wildcard DNS challenge, SSL troubleshooting with Cloudflare proxy

- Skill: `majiayu000/ssl-certificates` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/ssl-certificates`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/ssl-certificates/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/ssl-certificates

---


# Skill: SSL Certificates — Let's Encrypt + Cloudflare

## Quando Usar
- Certificado expirado ou prestes a expirar em qualquer domínio do servidor
- Novo domínio/subdomínio precisa de HTTPS (ex: novo preview, novo projeto)
- Renovação automática parou de funcionar (`certbot renew` falhando)
- Nginx retornando erro SSL (handshake fail, mixed content, HSTS problem)

## Contexto

**Domínios ativos neste servidor:**
| Domínio | Proxy CF | Tipo Cert |
|---------|----------|-----------|
| api.myapp.example.com, frontend.example.com | ✅ | Standard |
| myapp.example.com, www. | ✅ | Standard |
| work8.example.com | ✅ | Standard |
| portfolio.example.com | ✅ | Standard |
| neuralnets.example.com | ✅ | Standard |
| app.portfolio.example.com | ✅ | Standard |
| *.preview.myapp.example.com | ✅ | **Wildcard DNS-01** |

**Paths críticos:**