Dehydrated is a client for signing certificates with an ACME-server( currently only provided by Let's Encrypt ) implemented as a relatively simple bash-script.

It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed.

Other dependencies are: cURL, sed, grep, mktemp( all found on almost any system, cURL being the only exception )

https://github.com/lukas2511/dehydrated

I use dehydrated for nginx

This is how dehydrated works

1. Run once

   dehydrated --register --accept-terms

    

2. Create file named: /etc/dehydrated/config/domains.txt
3. Put inside the file your domain info as pr example below

   domain.tld fmtesting.domain.tld fmstaging.domain.tld filemaker.domain.tld www.domain.tld mail.domain.tld

    

4. Generate certs using crontab, launchctl, or as pr this example just the terminal as a one off

   dehydrated -c

    
5. Copy the generated certs to the appropriate service