pip install certbot-dns-cloudflare
certbot certonly --dns-cloudflare --dns-cloudflare-credentials /etc/letsencrypt/cloudflare/credentials.ini -d example.com -d "*.example.com"
certbot renew --dry-run
Let's Encrypt sends email reminders at 30, 20 and 10 days before expiry. Make sure your registration email is current.