This is a working draft.

1. Go to letsencrypt and donwload certbot package

2. In the terminal enter sudo certbot certonly --manual --preferred-challenges=dns

3. follow the instructions to create a TXT record on your domain host, to prove your ownership of your domain.

4. after following the prompting instructions, it should show a successful message and the paths to the cert and key files.

5. copy these files into the app root folder. and change the extension

   1. sudo cat /path/to/fullchain.pem > fullchain.cert

   2. sudo cat /path/to/privkey.pem > privkey.key

6. while you are at the project root upload the cert

   1. heroku certs:add filename.crt filename.key