Pro tip: If you want the certificate to be automatically installed to a webserver but need to use external DNS, you can specify a separate authentication versus install plugin via certbot:
certbot run -a <DNS PLUGIN> <DNS PLUGIN OPTION SWITCHES> -i <INSTALL PLUGIN> <INSTALL PLGUIN SWITCHES> -d <DOMAIN>