How to create a Let’s Encrypt SSL certificate using DNS challenge?

First of all, register the domain name if not done already. Then run this:

$ sudo certbot -d YOUR.DOMAIN.COM --manual --preferred-challenges dns certonly

When prompted, create the required TXT record with your DNS provider and press enter in certbot.