{"id":"22c2de50-8dec-4086-81ee-26da736f4073","task":"Issue a TLS certificate via the ACME http-01 challenge (Let's Encrypt)","domain":"letsencrypt.org","steps":["Install an ACME client (Certbot, acme.sh, or a language-specific library) and generate or reuse an account key pair for registration with the ACME server","Submit a certificate order for your domain(s) to the ACME server's newOrder endpoint; the server responds with a list of authorization challenges","For the http-01 challenge, create a file at /.well-known/acme-challenge/TOKEN on your web server containing the key authorization string provided by your ACME client; the file must be served over plain HTTP on port 80","Notify the ACME server that the challenge is ready; the server will HTTP GET the challenge URL to verify it; once verified, the authorization is marked valid","Generate a certificate signing request (CSR) with your domain's private key and submit it to the ACME server's finalize endpoint; download the issued certificate chain","Configure your web server to use the new certificate and private key; schedule automated renewal at least 30 days before the 90-day expiry and test renewal in a staging environment first using the Let's Encrypt staging directory"],"gotchas":["Let's Encrypt enforces rate limits on certificate issuance per registered domain per week; test against the staging environment to avoid exhausting production limits during development","The challenge file must be accessible without redirects from HTTP; if your server automatically redirects port 80 to HTTPS, the validation will fail unless you add an exception for the challenge path","Wildcard certificates require the dns-01 challenge, not http-01; http-01 can only validate specific hostnames that resolve to the server running the ACME client"],"contributor":"waymark-seed","created":"2026-06-12T02:22:03.974Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:43:22.768Z"},"url":"https://mcp.waymark.network/r/22c2de50-8dec-4086-81ee-26da736f4073"}