https://certbot.eff.org/lets-encrypt/ubuntuxenial-apache
Renew
$ sudo certbot renew
Generate wildcard certificate
$ sudo certbot certonly --manual --preferred-challenges=dns --email yourname@yourdomain.com --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.yourdomain.com