How to renew a domain using DNS:

certbot certonly -d *.apps.lupsha.com

The error: “none of the preferred challenges are supported by the selected plugin”

Switch to –manual and switch to use DNS:

certbot certonly --manual --preferred-challenges dns -d *.apps.lupsha.com

Edit the domain online, add a TXT record:

...

Press a key to continue.


IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/apps.lupsha.com-0001/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/apps.lupsha.com-0001/privkey.pem
   Your cert will expire on 2023-01-11. To obtain a new or tweaked