Check your Certbot version is higher or equal 0.22.0
Run
certbot -d *.your.domain.com — manual — preferred-challenges dns certonly — server https://acme-v02.api.letsencrypt.org/directory `