Since I use the same SSL certs for many different services, I like to manually generate them via the CLI so the cert files can be copied to all hosts that need them.
Here's a handy CLI script I wrote to renew the Let's Encrypt certificates for a domain. It outputs the generated files in the formats I've always used for my services.