CertBot - Windows Other

1. Install CertBot (beta)
2. Open MS-DOS command prompt in Administrator mode, run following commands:

   Replace «Email Address»

   Replace «Domain Name»

   certbot certonly --manual --preferred-challenges dns --email "<<Email Address>>" --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d <<Domain Name>>

3. Type Y and press [ENTER] key at the following prompt:

   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   Would you be willing, once your first certificate is successfully issued, to
   share your email address with the Electronic Frontier Foundation, a founding
   partner of the Let's Encrypt project and the non-profit organization that
   develops Certbot? We'd like to send you email about our work encrypting the web,
   EFF news, campaigns, and ways to support digital freedom.
   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   (Y)es/(N)o: 

   You will see following output:

   Obtaining a new certificate
   Performing the following challenges:
   dns-01 challenge for <<Domain Name>>
   
   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   NOTE: The IP of this machine will be publicly logged as having requested this
   certificate. If you're running certbot in manual mode on a machine that is not
   your server, please ensure you're okay with that.

4. Type Y and press [ENTER] key at the following prompt:

   Are you OK with your IP being logged?
   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   (Y)es/(N)o: 

   You will see the following output:

   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   Please deploy a DNS TXT record under the name
   _acme-challenge.<<Domain Name>> with the following value:
   
   <<DNS TXT Record>>
   
   Before continuing, verify the record is deployed.
   - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
   Press Enter to Continue

5. Download and Install OpenSSL for Windows

   https://slproweb.com/products/Win32OpenSSL.html

   https://slproweb.com/download/Win64OpenSSL_Light-1_1_1g.exe

6. Select option to copy OpenSSL libraries to OpenSSL /bin folder
7. In the MS-DOS command prompt window in Step 2 or a new MS-DOS command prompt window, run the following commands to create PFX file:

   https://community.letsencrypt.org/t/create-pfx-certificate/86949

   Replace «Domain Name»

   cd /d "C:\Program Files\OpenSSL-Win64\bin"
   openssl pkcs12 -export -out "C:\Certbot\archive\<<Domain Name>>\<<Domain Name>>.pfx" -inkey "C:\Certbot\archive\<<Domain Name>>\privkey1.pem" -in "C:\Certbot\archive\<<Domain Name>>\cert1.pem" -certfile "C:\Certbot\archive\<<Domain Name>>\chain1.pem" -password pass:<<password>>

8. Launch Internet Information Services (IIS) Manager from Control Panel → Administrative Tools
9. Click on Server tree node underneath Start Page in the left-side navigation panel
10. Click on Server Certificates under IIS section in the middle work area
11. Click on Import… link in right side actions panel
12. Using … button next to Certificate file (.pfx):, select the PFX file generated in Step 7
13. Enter the password entered in Step 2 in Password field
14. Click OK to Import the certificate

    Now you should see the imported certificate in the list of IIS Server Certificates in middle work area

15. Expand > Sites underneath the Server tree node in left-side navigation panel
16. Click on the Site that has HTTPS binding to which the certificate needs to be assigned-to
17. Click on Bindings… in right-side action panel
18. Select the HTTPS Binding and Click on Edit… or create a new binding (if not present)
19. In the SSL certificate: drop-down, select the newly imported SSL certificate in Step 14