Install Let's Encrypt SSL with Certbot (Apache) on RHEL 9

Step 1 – Install

subscription-manager repos --enable codeready-builder-for-rhel-9-$(arch)-rpms
dnf install -y certbot python3-certbot-apache

Step 2 – Obtain and install

certbot --apache -d example.com -d www.example.com

Step 3 – Verify

apachectl configtest && systemctl reload apache2
curl -I https://example.com

Step 4 – Auto-renewal

0 3 * * * certbot renew --quiet --deploy-hook "systemctl reload apache2"

Step 5 – Wildcard (DNS challenge)

certbot certonly --manual --preferred-challenges dns -d "*.example.com" -d example.com