Using acme.sh with Google Public CA

How to manually request a TLS certificate from Google Public CA using acme.sh (it is better to use ACME in fully automated fashion, but sometimes you need to do things manually).

1. Install acme.sh

2. In a Google Cloud shell, run:  $: gcloud publicca external-account-keys create 

3. In a terminal run:  

   1. $ acme.sh  --register-account  -m  myemail@example.com --server google --eab-kid <kid from the previous step> --eab-hmac-key <hmac from the previous step>

   2. $ acme.sh --issue --server google -d example.com  --dns  --yes-I-know-dns-manual-mode-enough-go-ahead-please

   3. Solve the DNS challenge using the provided nonce

   4. $ acme.sh --renew --server google -d example.com

   5. Configure your server to use the issued certificate chain