You need access to the DNS and be able to create txt records.
certbot certonly --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory --manual-public-ip-logging-ok -d '*.hg-system.com' -d hg-system.com
Change hg-system.com
to your Domain Name…
Create the txt Record in your DNS.
Type | TXT |
Name | _acme-challenge |
Value | the command shows above |
Note that you need to change the acme record 2x times!