sudo apt install certbot python3-certbot-nginx
sudo add-apt-repository ppa:certbot/certbot
sudo apt install python-certbot-nginx
sudo ufw allow 'Nginx Full'
sudo ufw delete allow 'Nginx HTTP'
sudo ufw delete allow 'Nginx HTTPS'
sudo certbot --nginx -d example.com -d www.example.com -d host.example.com
Renovando o certificado manualmente
sudo certbot renew --force-renewal
ou
fonte: https://www.codegrepper.com/code-examples/shell/linux+install+certbot+nginx