> certbot is a python program, better hope it keeps working- it’s definitely not kept working for me and I’m a seasoned sysadmin. a combination of my python environment becoming outdated (making updates impossible) and a deprecation of a critical API needed for it to work.

You could try out acme.sh that's written purely in shell. It's extremely capable and supports DNS challenge and multiple providers

https://github.com/acmesh-official/acme.sh