Debian 12 or 11:
Install CertBot:
sudo apt update
sudo apt install python3-certbot-apache
Make a safe SSL certificate for your domain:
sudo certbot --apache --rsa-key-size 4096 -d example.nl -d www.example.nl
with OCSP stapling:
sudo certbot --apache --rsa-key-size 4096 --must-staple --staple-ocsp -d hierjedomein.nl -d www.example.nl
Debian 10:
sudo nano /etc/apt/sources.list
Add this line:
deb http://ftp.debian.org/debian stretch-backports main
Install CertBot:
sudo apt update
sudo apt install python-certbot-apache -t stretch-backports
Make a safe SSL certificate for your domain:
sudo certbot --apache --rsa-key-size 4096 -d example.nl -d www.example.nl
with OCSP stapling:
sudo certbot --apache --rsa-key-size 4096 --must-staple --staple-ocsp -d example.nl -d www.example.nl