anchor.diff:  ```
   server {
       listen 443;
  -    server_name killbill.domain.com;
  +    server_name kaui.mydomain.com;
   ```
   
   Save the modified file, then reload it with the following command:
  
positive.code: 
  The `Let's Encrypt` certifcates are only valid 90 days and will therefore neeed to be renewed. `certbot` will create a cron entry under `/etc/cron.d/certbot` to make this process automatic.
  
  
negative.code: 
  === CNAMEs
  
  A CNAME, or *Canonical Name*, is an identifier that links your CA to the resources that you are protecting with your certificate. You will be protecting public access to your instances of KAUI and Kill Bill through your load balancer, identified by its DNS name. The CNAME will link your domain to the load balancer. If your domain is `mydomain.com` your CNAME might look like `kaui.mydomain.com`. This will direct browsers to your verified domain, and then, through your CNAME, to your AWS resources.
  
  The CNAME is part of your domain's DNS profile, and your domain provider should have instructions for setting it up.
  
  === Protocol and Port Setup
  
  Your AWS security group by default provides rules giving access to KAUI and Kill Bill using the HTTP protocol and a specified port number. For HTTPS you will need additional rules with the new protocol and a new port number.   
  
  === Validation
  
  