I followed this post.
cf) DNS-01 Challenge: https://letsencrypt.org/de/docs/challenge-types/.
Check the certificate certbot certificates Create a new certificate Prepare E-mail address for notifications from Let’s Encrypt (in followin case foo@bar.com). You should be ables to change the DNS records (TXT records) of the domain. Create the certificate certbot --manual --preferred-challenges dns certonly \ -d yourwebsite.com \ -d www.yourwebsite.com \ # SAN in the certificate Here is the sample messages.
Saving debug log to /var/log/letsencrypt/letsencrypt.