# Add --dry-run  to test...
    sudo letsencrypt certonly \
        --non-interactive \
        --agree-tos \
        --email root@the-nsa.org \
        --standalone -d mail.the-nsa.org