certificates

in a cmd session on the desktop PC in the bureau, use the certbot command

request new certificates: execute the next command and follow the instructions to setup the challenge

certbot certonly --manual -d <domain name>

renewing certificates:

certbot renew