My favorite Let's Encrypt clients is acme-tiny. It is just a very short Python script, which makes a code review easy. Som preparations must be done with OpenSSL. acme-tiny does not require root privileges. It just works. The user lets has to exist on an OpenBSD system with an nginx web server for the following description.