To get a wildcard SSL certificate from LetsEncrypt you need to run certbot version 0.22 or later according to https://community.letsencrypt.org/t/acme-v2-production-environment-wildcards/55578

I've installed certbot from apt using

sudo apt-get install certbot

However, that reports:

certbot is already the newest version (0.17.0-2).

How can I upgrade certbot to a version that supports wildcard certificates?


If you have already installed Certbot, you should add a parameter to apt-get install to upgrade only a specific package

sudo apt-get update
sudo apt-get install --only-upgrade certbot

Check version number

certbot --version || /path/to/certbot-auto --version

Reference answer: How to upgrade a single package using apt-get?

| improve this answer | |
  • When I asked this question, the problem was that apt didn't have the latest version of certbot available. I'm glad to see that it now has a new enough version to do the DNS verification for wildcard certs. – Stephen Ostermiller Feb 12 '19 at 22:26

As the certbot site indicates, the certbot team maintains a PPA. The certbot package is at 0.22.2 on all supported versions of Ubuntu in that PPA. (What are PPAs and how do I use them?)

| improve this answer | |

Check version number:

certbot --version

On Ubuntu systems, the Certbot team maintains a PPA. You can add it to your list of repositories and install Certbot by running the following commands:

$ sudo apt update
$ sudo apt install software-properties-common
$ sudo add-apt-repository universe
$ sudo add-apt-repository ppa:certbot/certbot
$ sudo apt install certbot


| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.