This is an excerpt from the official tutorial “Step 3: Request a Let’s Encrypt SSL wildcard certificate”. Some steps/commands were adjusted for the purpose of just renewing the certificate (instead of installing a new certbot instance).