Just renewed my Let's Encrypt cert with:

https://github.com/dlapiduz/certbot-s3front

One command. It was super easy, I wasn't sure it had worked at first.