{"id":15059,"date":"2023-09-19T10:29:22","date_gmt":"2023-09-19T09:29:22","guid":{"rendered":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?p=15059"},"modified":"2023-09-21T09:53:39","modified_gmt":"2023-09-21T08:53:39","slug":"how-to-secure-apache-with-lets-encrypt-on-centos-7","status":"publish","type":"post","link":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/","title":{"rendered":"How to Secure Apache with Let&#8217;s Encrypt on CentOS 7?"},"content":{"rendered":"\n<p>For a secured website browsing experience, SSL encryption is essential. Certificate Authority providers like Let\u2019s Encrypt offer <a href=\"https:\/\/www.milesweb.co.uk\/web-security\/ssl-certificates\" target=\"_blank\" rel=\"noreferrer noopener\">SSL certificates<\/a> to encrypt sensitive information from breaching data to hackers.<\/p>\n\n\n\n<p><a><\/a>In the following tutorial, we will be discussing major steps to use Certbot to set up a TLS\/SSL certificate. You will learn to do it from Let\u2019s Encrypt on a CentOS 7 server running Apache as a web server followed by the auto-renewal process.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<ol class=\"wp-block-list\"><li>The CentOS server of version 7 with a non-root user having sudo privileges. <\/li><li>A basic firewall setting.<\/li><li>Installed Apache on the CentOS 7 server with a configured virtual host. Ensure of having a virtual host file for the website as in this article we will be using \/etc\/httpd\/sites-available\/example.com.conf as an example.<\/li><li>Registered domain name on which users want a SSL certificate. MilesWeb offers domain registration at reliable costs. Get a domain name of your choice and build an online presence.<\/li><li>DNS \u201cA\u201d record that makes registered domain publicly available. Having the same, will give an IP address to the domain. This DNS \u201cA\u201d record is essential because Let\u2019s Encrypt validates the domain proprietor of the certificate issue.<\/li><\/ol>\n\n\n\n<p>Once all required elements are available, proceed further to install the Let\u2019s Encrypt client software.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Steps to Install Let\u2019s Encrypt on Apache Cent OS 7<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Installing the Certbot Let\u2019s Encrypt Client<\/h3>\n\n\n\n<p>First, install Certbot and mod_ssl. The mod_ssl is an Apache module providing SSL v3 encryption support.<\/p>\n\n\n\n<p>There is no certbot package available in the package manager by default. Certbot requires the EPEL repository to be enabled.<\/p>\n\n\n\n<p>Run the following command to add the CentOS 7 EPEL repository:<\/p>\n\n\n\n<p><code>sudo yum install epel-release<\/code><\/p>\n\n\n\n<p>After having access to the repository, install required packages.<\/p>\n\n\n\n<p><code>sudo yum install certbot python2-certbot-apache mod_ssl<\/code><\/p>\n\n\n\n<p>When installing the software, users will be prompted to import a GPG key. Installing this package will verify its authenticity. Upon being prompted, type y and press ENTER to accept the GPG key.<\/p>\n\n\n\n<p>Users are now ready to run Certbot and fetch their certificates after installing these services.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Getting a Certificate<\/h3>\n\n\n\n<p>After Certbot installation, use it to request an SSL certificate for the registered domain. By using the certbot Let&#8217;s Encrypt client for Apache, many of the steps in the SSL Certificate registrations can be automated. Using the parameters, user provides, the client will obtain and install a new SSL certificate for the domains user specify.<\/p>\n\n\n\n<p>Run certbot with the following commands to perform the interactive installation and obtain a certificate that covers only one domain:<\/p>\n\n\n\n<p><code>sudo certbot --apache -d example.com<\/code><\/p>\n\n\n\n<p>The <em><strong>-d flag<\/strong><\/em> command specifies the domain to configure the certificate for when certbot is run with the <strong><em>&#8211;apache<\/em><\/strong> plugin.<\/p>\n\n\n\n<p>The <em><strong>-d flag<\/strong><\/em> can be passed to the command if they want to install a single certificate that applies to multiple domains or subdomains. Let&#8217;s Encrypt uses the first domain name in the list of parameters to create the certificate. This is why the base domain name should be the first on the list, followed by any further subdomains or aliases:<\/p>\n\n\n\n<p><code>sudo certbot --apache -d example.com -d www.example.com<\/code><\/p>\n\n\n\n<p>In this example, the base domain is example.com.<\/p>\n\n\n\n<p>While you are requesting a certificate, the certbot utility can ask for domain information as well. You can use this functionality by calling certbot without any domains:<\/p>\n\n\n\n<p><code>sudo certbot \u2013apache<\/code><\/p>\n\n\n\n<p>Using the program, users can customize your certificate options step-by-step. When you agree to the terms of service, they will be asked to provide an email address for lost key recovery and notices. Specify the domain name on the command line. Not doing it will remind users to choose a virtual host file. By default <strong><em>ssl.conf<\/em><\/strong> file is the Virtual Host file that will function.<\/p>\n\n\n\n<p>Moreover, users also have to choose between http and <strong><a href=\"https:\/\/www.milesweb.co.uk\/blog\/hosting\/https-port\/\" target=\"_blank\" rel=\"noreferrer noopener\">HTTPS port<\/a><\/strong> or forcing to redirect requests to HTTPS. For advanced security, forced redirection is recommended. Also, this method is feasible if users do not have a special way to allow unencrypted connections. Hit ENTER once preferred choice.<\/p>\n\n\n\n<p>Output<\/p>\n\n\n\n<p><em>Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access.<\/em><\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p><em>1: No redirect &#8211; Make no further changes to the webserver configuration.<\/em><\/p>\n\n\n\n<p><em>2: Redirect &#8211; Make all requests redirect to secure HTTPS access. Choose this for<\/em><\/p>\n\n\n\n<p><em>new sites, or if you&#8217;re confident your site works on HTTPS. You can undo this<\/em><\/p>\n\n\n\n<p><em>change by editing your web server&#8217;s configuration.<\/em><\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p><em>Select the appropriate number [1-2] then [enter] (press &#8216;c&#8217; to cancel):2<\/em><\/p>\n\n\n\n<p>The message will be displayed after the successful installation.<\/p>\n\n\n\n<p><em>Output<\/em><\/p>\n\n\n\n<p>IMPORTANT NOTES:<\/p>\n\n\n\n<p>&nbsp;&#8211; Congratulations! Your certificate and chain have been saved at:<\/p>\n\n\n\n<p> <code>\/etc\/letsencrypt\/live\/example.com\/fullchain.pem<\/code><\/p>\n\n\n\n<p>&nbsp;&nbsp; Your key file has been saved at:<\/p>\n\n\n\n<p>&nbsp;&nbsp; <code>\/etc\/letsencrypt\/live\/example.com\/privkey.pem<\/code><\/p>\n\n\n\n<p>&nbsp;&nbsp; Your cert will expire on 2019-08-14. To obtain a new or tweaked<\/p>\n\n\n\n<p>&nbsp;&nbsp; version of this certificate in the future, simply run certbot again<\/p>\n\n\n\n<p>&nbsp;&nbsp; with the &#8220;certonly&#8221; option. To non-interactively renew *all* of<\/p>\n\n\n\n<p>&nbsp;&nbsp; your certificates, run &#8220;certbot renew&#8221;<\/p>\n\n\n\n<p>&nbsp;&#8211; If you like Certbot, please consider supporting our work by:<\/p>\n\n\n\n<p><em>&nbsp;&nbsp; Donating to ISRG \/ Let&#8217;s Encrypt:&nbsp;&nbsp; https:\/\/letsencrypt.org\/donate<\/em><\/p>\n\n\n\n<p><em>&nbsp;&nbsp; Donating to EFF:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; https:\/\/eff.org\/donate-le<\/em><\/p>\n\n\n\n<p>Certificates generated will be available in a subdirectory. The subdirectory users can locate at live directory. For convenience, users can name it after the base domain name.<\/p>\n\n\n\n<p>Till now, SSL certificates are installed, downloaded, and loaded. Cross check the status whether it is working or not.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Checking the Certificate Status<\/h3>\n\n\n\n<p>Cross checking the SSL certificate status on domain is essential. Here is a link given below, open it in the web browser with the base domain.<\/p>\n\n\n\n<p><a href=\"https:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=example.com\" rel=\"nofollow\">https:\/\/www.ssllabs.com\/ssltest\/analyze.html?d=example.com<\/a><\/p>\n\n\n\n<p>Users will navigate to the landing page where they can test SSL connection to the server.<\/p>\n\n\n\n<p>The test process will take some time to complete and update in the browser. After it finishes, there will be a letter grade rating security and quality configurations.<\/p>\n\n\n\n<p>To know more about this grading scheme, search about SSL Labs grading scheme 2018 online. You will get to know grading parameters.<\/p>\n\n\n\n<p>Notice the browser&#8217;s security indicator and reload that website using https:\/\/. If the green lock icon is visible, users must be assured of the website&#8217;s security.<\/p>\n\n\n\n<p>After verification of SSL certificates, the next step is to set up an auto-renewal process to validate certificates automatically after expiration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Auto Renew the Let\u2019s Encrypt Certificate<\/h3>\n\n\n\n<p>As every SSL certificate has its expiration, execute this command so the certificate will auto renew 30 days before its expiration.<\/p>\n\n\n\n<p><code>sudo certbot renew --dry-run<\/code><\/p>\n\n\n\n<p>Final output will be like the:<\/p>\n\n\n\n<p>Output<\/p>\n\n\n\n<p><em>Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log<\/em><\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p><em>Processing \/etc\/letsencrypt\/renewal\/example.com.conf<\/em><\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p>Cert not due for renewal, but simulating renewal for dry run<\/p>\n\n\n\n<p>Plugins selected: Authenticator apache, Installer apache<\/p>\n\n\n\n<p>Starting new HTTPS connection (1): acme-staging-v02.api.letsencrypt.org<\/p>\n\n\n\n<p>Renewing an existing certificate<\/p>\n\n\n\n<p>Performing the following challenges:<\/p>\n\n\n\n<p>http-01 challenge for example.com<\/p>\n\n\n\n<p>http-01 challenge for www.example.com<\/p>\n\n\n\n<p>Waiting for verification&#8230;<\/p>\n\n\n\n<p>Cleaning up challenges<\/p>\n\n\n\n<p>Resetting dropped connection: acme-staging-v02.api.letsencrypt.org<\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p>new certificate deployed with reload of apache server; fullchain is<\/p>\n\n\n\n<p><code>\/etc\/letsencrypt\/live\/example.com\/fullchain.pem<\/code><\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p>&#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211; &#8211;<\/p>\n\n\n\n<p>** DRY RUN: simulating &#8216;certbot renew&#8217; close to cert expiry<\/p>\n\n\n\n<p>**&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (The test certificates below have not been saved.)<\/p>\n\n\n\n<p>Congratulations, all renewals succeeded. The following certs have been renewed:<\/p>\n\n\n\n<p><code>\/etc\/letsencrypt\/live\/example.com\/fullchain.pem (success)<\/code><\/p>\n\n\n\n<p>&#8230;<\/p>\n\n\n\n<p>You will see only the base domain name in the output if you created a bundled certificate with multiple domains, but the renewal will be valid for all domains included.<\/p>\n\n\n\n<p>By creating a cron job that executes the automatic renewal command periodically, you can ensure that your certificates will not become outdated. It is safe to create a cron job that runs every week or even every day since the renewal checks for the expiration date and only performs the renewal if the certificate is less than 30 days away from expiration.<\/p>\n\n\n\n<p>Use the following command to create a cron job.<\/p>\n\n\n\n<p><code>sudo crontab -e<\/code><\/p>\n\n\n\n<p>Your text editor will open the default crontab which is an empty text file at this point. Paste in the following line, then save and close it:<\/p>\n\n\n\n<code>crontab<\/code>\n\n\n\n<p>. . .<\/p>\n\n\n\n<code>15 3 &nbsp; * \/usr\/bin\/certbot renew \u2013quiet<\/code>\n\n\n\n<p>The string &#8220;15 3 *&#8221; in this context signifies scheduling the subsequent command to execute daily at 3:15 am, but you are free to select any time that suits your needs.<\/p>\n\n\n\n<p>The renew command associated with Certbot will scrutinize every certificate present on the system and refresh those on the verge of expiring in less than thirty days. Utilizing &#8220;&#8211;quiet&#8221; instructs Certbot to operate silently without producing output or requiring user interaction.<\/p>\n\n\n\n<p>Henceforth, cron will execute this command on a daily basis. All certificates on the system will undergo automatic renewal and reloading when their expiration is thirty days away or less.<\/p>\n\n\n\n<p><div class=\"vlt-box \">\n<div class=\"box-title\" style=\"background:#D5EAFF; color:#000\">Conclusion<\/div>\n<div class=\"box-content\" >\n<p>So far, readers have gone through installing SSL certificate on CentOS 7 operating system with the Apache web server. Auto renew it and create a cron job to execute the auto renewal command. For further questions, techies at MilesWeb are there to help you out.<\/p>\n<\/div><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>For a secured website browsing experience, SSL encryption is essential. Certificate Authority providers like Let\u2019s Encrypt offer SSL certificates to encrypt sensitive information from breaching data to hackers. In the following tutorial, we will be discussing major steps to use Certbot to set up a TLS\/SSL certificate. You will learn to do it from Let\u2019s [&hellip;]<\/p>\n","protected":false},"author":35,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41],"tags":[1417,930,141],"class_list":["post-15059","post","type-post","status-publish","format-standard","placeholder-for-hentry","category-howtos","tag-apache-server","tag-centos","tag-ssl"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Secure Apache with Let&#039;s Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Secure Apache with Let&#039;s Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb\" \/>\n<meta property=\"og:description\" content=\"For a secured website browsing experience, SSL encryption is essential. Certificate Authority providers like Let\u2019s Encrypt offer SSL certificates to encrypt sensitive information from breaching data to hackers. In the following tutorial, we will be discussing major steps to use Certbot to set up a TLS\/SSL certificate. You will learn to do it from Let\u2019s [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/\" \/>\n<meta property=\"og:site_name\" content=\"Web Hosting FAQs by MilesWeb\" \/>\n<meta property=\"article:published_time\" content=\"2023-09-19T09:29:22+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-21T08:53:39+00:00\" \/>\n<meta name=\"author\" content=\"Jackson Lane\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jackson Lane\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/\",\"name\":\"How to Secure Apache with Let's Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb\",\"isPartOf\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\"},\"datePublished\":\"2023-09-19T09:29:22+00:00\",\"dateModified\":\"2023-09-21T08:53:39+00:00\",\"author\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Secure Apache with Let&#8217;s Encrypt on CentOS 7?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/\",\"name\":\"Web Hosting FAQs by MilesWeb\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758\",\"name\":\"Jackson Lane\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g\",\"caption\":\"Jackson Lane\"},\"description\":\"I am an experienced Marketing Manager at MilesWeb UK, a leading web hosting company in the UK. With extensive knowledge in web hosting, WordPress, digital marketing, and web development, I'm committed to helping businesses succeed online. His expertise and enthusiasm for the digital world make him a valuable asset in the constantly changing field of online marketing.\",\"url\":\"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/jackson-lane\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Secure Apache with Let's Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/","og_locale":"en_GB","og_type":"article","og_title":"How to Secure Apache with Let's Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb","og_description":"For a secured website browsing experience, SSL encryption is essential. Certificate Authority providers like Let\u2019s Encrypt offer SSL certificates to encrypt sensitive information from breaching data to hackers. In the following tutorial, we will be discussing major steps to use Certbot to set up a TLS\/SSL certificate. You will learn to do it from Let\u2019s [&hellip;]","og_url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/","og_site_name":"Web Hosting FAQs by MilesWeb","article_published_time":"2023-09-19T09:29:22+00:00","article_modified_time":"2023-09-21T08:53:39+00:00","author":"Jackson Lane","twitter_misc":{"Written by":"Jackson Lane","Estimated reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/","name":"How to Secure Apache with Let's Encrypt on CentOS 7? - Web Hosting FAQs by MilesWeb","isPartOf":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website"},"datePublished":"2023-09-19T09:29:22+00:00","dateModified":"2023-09-21T08:53:39+00:00","author":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758"},"breadcrumb":{"@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/how-to-secure-apache-with-lets-encrypt-on-centos-7\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/"},{"@type":"ListItem","position":2,"name":"How to Secure Apache with Let&#8217;s Encrypt on CentOS 7?"}]},{"@type":"WebSite","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#website","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/","name":"Web Hosting FAQs by MilesWeb","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/1f580bdff0fa81720fae0fd0c3919758","name":"Jackson Lane","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dd43b6ec8f85bdee32ceaac59c48807f?s=96&d=blank&r=g","caption":"Jackson Lane"},"description":"I am an experienced Marketing Manager at MilesWeb UK, a leading web hosting company in the UK. With extensive knowledge in web hosting, WordPress, digital marketing, and web development, I'm committed to helping businesses succeed online. His expertise and enthusiasm for the digital world make him a valuable asset in the constantly changing field of online marketing.","url":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/author\/jackson-lane\/"}]}},"views":1,"_links":{"self":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/15059","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/users\/35"}],"replies":[{"embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/comments?post=15059"}],"version-history":[{"count":5,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/15059\/revisions"}],"predecessor-version":[{"id":15078,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/posts\/15059\/revisions\/15078"}],"wp:attachment":[{"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/media?parent=15059"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/categories?post=15059"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.milesweb.co.uk\/hosting-faqs\/wp-json\/wp\/v2\/tags?post=15059"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}