certbot certonly --manual --preferred-challenges=dns --email peter@quantr.hk --server https://acme-v02.api.letsencrypt.org/directory --agree-tos -d *.quantr.hk -d quantr.hk

<VirtualHost *:443>
        SSLEngine on
        SSLCertificateFile /etc/letsencrypt/live/quantr.hk-0003/fullchain.pem
        SSLCertificateKeyFile /etc/letsencrypt/live/quantr.hk-0003/privkey.pem
        Include /etc/letsencrypt/options-ssl-apache.conf

        ServerAdmin peter@quantr.hk
        ServerName xxx.quantr.hk
        ProxyPass / http://192.168.10.999:8888/
        ProxyPassReverse / http://192.168.10.999:8888/
</VirtualHost>