Letsencrypt/acme.sh/dns-manual-modeについて、ここに記述してください。

https://github.com/Neilpang/acme.sh/wiki/dns-manual-mode

  1. First step: 

acme.sh --issue -d example.com --dns \
 --yes-I-know-dns-manual-mode-enough-go-ahead-please
  1. Please add the TXT record to your DNS records.
    • This step is required every time you renew your certificate. With DNS api mode, this step can be automated.
  2. Now retry with --renew command. 

acme.sh --renew -d example.com \
  --yes-I-know-dns-manual-mode-enough-go-ahead-please

%acme.sh --issue -d moin.qmail.jp --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
[JST] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 7
[JST] Can not init api.
[JST] Single domain='moin.qmail.jp'
[JST] Getting domain auth token for each domain
[JST] Getting webroot for domain='moin.qmail.jp'
[JST] Getting new-authz for domain='moin.qmail.jp'
[JST] The new-authz request is ok.
[JST] Add the following TXT record:
[JST] Domain: '_acme-challenge.moin.qmail.jp'
[JST] TXT value: 'rVzofIjT3ZhSxiWVpt3edCSnQ6pZ1L35fJK-FLEKBXA'
[JST] Please be aware that you prepend _acme-challenge. before your domain
[JST] so the resulting subdomain will be: _acme-challenge.moin.qmail.jp
[JST] Please add the TXT records to the domains, and re-run with --renew.
[JST] Please add '--debug' or '--log' to check more details.
[JST] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh