The default “certbot” client will not work on older versions of Ubuntu because of outdated python and openssl versions. Here is a quick script that does the job. https://github.com/Neilpang/acme.sh
After installing the script, run
acme.sh --issue -d domain.in -d www.domain.in -w /var/www/document-root \
--certpath /etc/ssl/certs/domain.in.crt \
--keypath /etc/ssl/certs/domain.in.key \
--fullchainpath /etc/ssl/certs/intermediate.pem \
--reloadcmd "service apache2 restart"
Add the following in Apache configuration file
SSLEngine on
SSLCertificateFile /etc/ssl/certs/domain.crt
SSLCertificateKeyFile /etc/ssl/certs/domain.key
SSLCertificateChainFile /etc/ssl/certs/intermediate.pem
Add acme.sh to crontab as described in its github page and restart Apache.