set up auto renewing lets encrypt cert on a website behind cloudflare on ubuntu 16.04

cloudflare-letsencrypt-ubuntu-16.04.sh

sudo apt-get update
sudo apt-get install software-properties-common
sudo add-apt-repository universe
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install certbot python-certbot-apache 
sudo apt install python3-pip
sudo pip3 install certbot-dns-cloudflare
sudo touch ~/cloudflare.txt
sudo printf 'dns_cloudflare_email = [email protected] \n
dns_cloudflare_api_key = YOUR_CLOUDFLARE_API_KEY' > ~/cloudflare.txt
sudo chmod 600 ~/cloudflare.txt
sudo certbot \
  --dns-cloudflare \
  --dns-cloudflare-credentials ~/cloudflare.txt \
  --dns-cloudflare-propagation-seconds 60 \
   -i apache -d "*.domain.com" -d domain.com --server https://acme-v02.api.letsencrypt.org/directory

You must have at least one subdomain setup in either httpd.conf or /sites-available/domain.conf