Certbot is a free, open-source cli tool that automates obtaining and renewing SSL/TLS Certificates from let’s encrypt. Domain Ownership verification via DNS-01 challenges let you fetch wildcard certificates. The API of cloudflare is compatible with DNS-01 challenges, this allows wildcard certs and getting certificates for non public facing internal webservices.