present

if the certificate does not exist, it will be obtained

absent

the certificate will be removed

# use object id as domain
__letsencrypt_cert example.com \


    --admin-email root@example.com \


    --automatic-renewal \


    --renew-hook "service nginx reload" \


    --webroot /data/letsencrypt/root

# domain parameter is specified so object id is not used as domain
# and example.com needs to be included again with domain parameter
__letsencrypt_cert example.com \


    --admin-email root@example.com \


    --automatic-renewal \


    --domain example.com \


    --domain foo.example.com \


    --domain bar.example.com \


    --renew-hook "service nginx reload" \


    --webroot /data/letsencrypt/root