ACME

https://github.com/acmesh-official/acme.sh/wiki/%E8%AF%B4%E6%98%8E

acme.sh --set-default-ca --server google

regenerate hmac and key
gcloud publicca external-account-keys create
acme.sh --server https://dv.acme-v02.api.pki.goog/directory --register-account  --accountemail  --eab-kid  --eab-hmac-key 

bash acme.sh --issue --dns -d lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please
bash acme.sh --renew -d lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please

bash acme.sh --issue --dns -d ddns.lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please
bash acme.sh --renew -d ddns.lado.online --yes-I-know-dns-manual-mode-enough-go-ahead-please

bash /root/.acme.sh/acme.sh --issue --dns dns_ali -d lado.online
bash /root/.acme.sh/acme.sh --issue --dns dns_ali -d ddns.lado.online


bash /root/.acme.sh/acme.sh --install-cert -d lado.online --cert-file /etc/apache2/cert/lado.online.pem --key-file /etc/apache2/cert/lado.online.key --fullchain-file /etc/apache2/cert/fullchain.pem --reloadcmd "service apache2 force-reload"