@mnordhoff thanks for your help, it's appreciated.
Sorry for making an obvious syntax error, my apologies. I'll pay closer attention from now on.
Thank you for the suggestion of using the Certbot Cloudflare DNS plugin.
I'm tempted to move the domain to AWS Route 53 to manage the DNS there.
If so would I be able to set-up auto renewal?
A quick Google reveals:
Am I on the right track?