sudo apt update
sudo apt install certbot
sudo certbot certonly --manual --preferred-challenges dns -d <domain.com>
sudo -i
cp /etc/letsencrypt/live/<domain.com>/* /home/user/
openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out <domain-com>-cert-fullchain.pfx