Certificates are initially acquired with the certbot certonly
command.
Certificates expire 90 days after being issued and need to be renewed (or replaced).
When acquiring a certificate, a list of options is specificed. These include domain names and an authentication method. The official manual refers to authentication methods as "plugins". The term "plugins" also refers to "installation plugins", which are optional components used to install certificates on webservers.