letsencrypt签署通配符域名–cloudflare

参考这篇文章就可以：
https://www.cyberciti.biz/faq/issue-lets-encrypt-wildcard-certificate-with-acme-sh-and-cloudflare-dns/#Issuing_Let's_Encrypt_wildcard_certificate

如果某种情况下需要强制更新证书：
https://www.cyberciti.biz/faq/how-to-forcefully-renew-lets-encrypt-certificate

cf里获取api token的界面：

验证获取到的token是否可用：

root@moneyslow.com:~# curl -X GET "https://api.cloudflare.com/client/v4/user/tokens/verify" \
     -H "Authorization: Bearer xxxjH8VRcIndEPE0TtBfUnM" \
     -H "Content-Type:application/json"
{"result":{"id":"xxxx7963f476753c1","status":"active"},"success":true,"errors":[],"messages":[{"code":10000,"message":"This API Token is valid and active","type":null}]}
看到成功就没问题。

其他的按照文档来就可以。

如果是dnspod的域名，参考这个文章：

https://moneyslow.com/letsencrypt%e7%ad%be%e7%bd%b2%e9%80%9a%e9%85%8d%e7%ac%a6%e5%9f%9f%e5%90%8d-dnspod.html

如果是godaddy的，参考这个文章：

letsencrypt签署通配符域名

See more