Let’s Encrypt is an automated certificate authority providing free of charge, domain-validated TLS certificates that are obtained using the ACME protocol. Debian 8 (Jessie) Howto Enable backports: https://backports.debian.org/Instructions/ Install certbot: https://certbot.eff.org/#debianjessie-apache apt-get install python-certbot-apache -t jessie-backports certbot –apache Optionally: follow certbot instructions and enable quiet cron job or follow up Optionally enable Perfect Forward Secrecy: https://www.sslplus.de/wiki/Wie_konfiguriert_man_Apache_2.x_f%C3%BCr_Perfect_Forward_Secrecy edit “/etc/apache2/mods-available/ssl.conf” and uncomment