certbot certonly --webroot --webroot-path /srv/nginx --no-eff-email \
    --key-type ecdsa --must-staple \
    --deploy-hook "certbot-ocsp-fetcher -o /var/cache/certbot-ocsp-fetcher" \
    --cert-name miniflux.yourdomain.tld \
    -d miniflux.yourdomain.tld

restorecon -Rv /var/cache/certbot-ocsp-fetcher