#reboot
ATE0
AT
AT+CREBOOT
ATE0
AT
ATE0
#set verbose
AT+CMEE=2
# sim and rf checks
AT+CPIN?
AT+CSQ
#fs init
AT+CFSINIT
#upload ca cert
cacert
#convert ca cert and end uploading
AT+CSSLCFG="CONVERT",2,ca.pem 
AT+CFSTERM
#manual APN conf
AT+CFUN=0
AT+CGDCONT=$pdpcid$,"IP","m2m.public.cz"
AT+CFUN=1
AT+CGATT?
AT+CGNAPN
AT+CNCFG=$pdpcid$,1,"m2m.public.cz"
#APN check
AT+CGNAPN
#activate APN/PDP
AT+CNACT=0,1
AT+CNACT?
#synch UTC
AT+CNTP=$ntp_server$,2,0,2
sleep 15
AT+CNTP
AT+CCLK?




AT+SMCONF="CLIENTID","SIM7080"
AT+SMCONF="URL","[ID].s2.eu.hivemq.cloud",8883
AT+SMCONF="USERNAME","[username]"
AT+SMCONF="PASSWORD","[password]"

3) setting up SSL and connecting

AT+CSSLCFG="sslversion",1,3
// TLS 1.2

AT+CSSLCFG="SNI",1,"[ID].s2.eu.hivemq.cloud"
// The SNI option is available for the SIM7080 but I found examples of some other Simcom modules that only need to "enable" SNI". For my module I need to enter a server name, so I input the exact same URL as my cluster's including my ID, is that ok?

AT+SMSSL=1,"isrgrootx1.pem",""
// first quotes are for the root CA - second quotes are for the .crt certificate and it should technically come with a private key, so I leave it empty since I couldn't convert the server certificate as such earlier... is that OK too?

AT+SMCONN
// here I'm always getting +CME ERROR: operation not allowed



    Set a Ciphersuite on correct >ctxindex>, in my case is 1:
    AT+CSSLCFG=“CIPHERSUITE”,1,0,0x0035
    AT+CSSLCFG=“CIPHERSUITE”,1,1,0x002F
    I’ve added two ciphersuits 0 and 1 on <cipher_index> just in case.

    Dissable clock checking on certificate, I don’t really know if it is mandatory
    AT+CSSLCFG=“IGNORERTCTIME”,1,1

    Check certificate, maybe don’t needed
    AT+CSSLCFG?

    Set only root certificate:
    AT+SMSSL=2,“isrgrootx1.pem”,“”

    Finally connect:
    AT+SMCONN