I'd suggest certbot by Lets Encrypt: https://certbot.eff.org/

It'll do everything for you besides check your email and plug the certs into your program.