Search notes:

/etc/letsencrypt

Directories:

`accounts/`
`archive/`
`csr/`
`keys/`
`live/`	Symlinks to the private keys and certificates managed by Let's encrypt.
`renewal/`	For each managed domain, this directory contains a `$DOMAIN.conf` file which stores the paths to the domain's keys and certificates (`/etc/letsencrypt/live/$DOMAIN`), the archive dir `/etc/letsencrypt/archive/$DOMAIN` and the options used for the renewal process.
`renewal-hooks/`	Three subdirectories: `pre`, `deploy` and `post`. See also `certbot` options such as `--deploy-hook` etc. See Pre and Post Validation Hooks in the manual.

Files:

`options-ssl-nginx.conf`	This file is included from `/etc/nginx/conf.d/xyz.domain.tld.conf`.
`cli.ini`
`ssl-dhparams.pem`	This file is referenced from `/etc/nginx/conf.d/xyz.domain.tld.conf` with the nginx configuration parameter `ssl_dhparam`.

See also