Unfortunately, my host does not directly support Let's Encrypt so I had to go all round-about to get it done... and that was much more work than it needed to be... which is why I guess they created Let's Encrypt in the first place.
And the trouble is now I will have to do this again in 90 days! Mer Gerds! what a hassle!!!
So this will probably eventually piss me off enough to change hosts... not looking forward to that.