Use certbot

certbot is an awesome tool for managing SSL certificates. It is a command-line tool that can be used to obtain and renew SSL certificates from Let’s Encrypt. It can also be used to install the certificates on a web server.

The online documentation is pretty good, do check it out.