certbot --authenticator standalone --installer apache -d <domain> 
--pre-hook "apache2ctl stop" --post-hook "apache2ctl start"

https://certbot.eff.org/