Done according to https://github.com/Neilpang/acme.sh/wiki/dns-manual-mode
Warning: DNS manual mode can not renew automatically. For renewal you need to repeat steps below each time. Certificate needs to be renewed within 90 days.
Install client
git clone https://github.com/Neilpang/acme.sh.git
cd ./acme.sh
./acme.sh --install
Get values for TXT records for DNS records:
acme.sh --issue --dns -d <your_domen> -d '*.<your_domen>' --yes-I-know-dns-manual-mode-enough-go-ahead-please
Add the TXT records to your DNS records.
Check TXT records via dig:
dig _acme-challenge.<your_domen> -t txt
Get your certificate with --renew command:
acme.sh --renew -d <your_domen> -d '*.<your_domen>' --yes-I-know-dns-manual-mode-enough-go-ahead-please