1. Install certbot as needed for your web server and operating system from EFF
  2. certbot certonly --manual --preferred-challenges dns -d [domain]
  3. Create DNS CNAME as needed
  4. Wait for DNS propagation - Google ToolBox
  5. certbot should create /etc/letsencrypt/live/[domain]

The below is for web root (.well-known/acme-challenge)

  • certbot certonly --manual --preferred-challenges=http -d [domain]