Let’s Encrypt – certbot

# certbot certonly --weroot -w /var/www/domain.com/ -d domain.com -d www.domain.com

# openssl dhparam -out /etc/ssl/private/domain.com.br.2048.dh.pem 2048