apache.conf

<IfModule mod_ssl.c>
  <VirtualHost *:443>
    Include conf/vhosts/domain.vhost

    SSLCertificateFile /etc/letsencrypt/live/domain.com/fullchain.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/domain.com/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
  </VirtualHost>
</IfModule>

download-certbot.sh

# download certbot-auto
wget https://dl.eff.org/certbot-auto
chmod a+x certbot-auto

lets-encrypt-wildcard.sh

# create the wildcard certificate
sudo ./certbot-auto certonly --manual -d domain.com -d *.domain.com --server https://acme-v02.api.letsencrypt.org/directory

renew-wildcard-ssl.sh

# renew wildcard certificate for specific domains
sudo ./certbot-auto certonly --apache -n -d domain.com -d *.domain.com