sudo certbot --apache --redirect --agree-tos --no-eff-email --cert-name yourdomain.com --domains yourdomain.com --renew-by-default --keep-until-expiring --rsa-key-size 4096 --must-staple --preferred-challenges http --hsts --staple-ocsp --email your-email@example.com --force-renewal