Right, so a checklist is needed for a website theese days..

• DNS

• DNSSEC, which is close to being simple with a bind server

• HTTP

• HTTPS

• TLS Certificate from Let's Encrypt

A sucessfull validation gives me 5 files:

README
cert.pem
chain.pem
fullchain.pem
privkey.pem

The privkey.pem being …