ssl_certificate          /etc/letsencrypt/live/krd.sh/fullchain.pem;
ssl_certificate_key      /etc/letsencrypt/live/krd.sh/privkey.pem;
ssl_trusted_certificate  /etc/letsencrypt/live/krd.sh/chain.pem;