trying to secure a new web server ,
my httpd.conf has,...

#   Point SSLCertificateFile at a PEM encoded certificate.  If
#   the certificate is encrypted, then you will be prompted for a
#   pass phrase.  Note that restarting httpd will prompt again.  Keep
#   in mind that if you have both an RSA and a DSA certificate you
#   can configure both in parallel (to also allow the use of DSA
#   ciphers, etc.)
#   Some ECC cipher suites (http://www.ietf.org/rfc/rfc4492.txt)
#   require an ECC certificate which can also be configured in
#   parallel.
#SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateFile /etc/letsencrypt/live/linuxlighthouse.com/fullchain.pem



lrwxrwxrwx. 1 root root 48 Jan  5 11:10 /etc/letsencrypt/live/linuxlighthouse.com/fullchain.pem -> ../../archive/linuxlighthouse.com/fullchain4.pem