Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
I did not run a command, but reached out to my host to verify shell access. I was told that SSL cannot be enabled from my end and that I need to contact Let’s Encrypt and provide them my website CSR. I am at a loss of what to do next.
that's how typical CAAs are working. The customers creates a CSR, sends the CSR to the CAA, the CAA sends a mail with a link, the customer clicks the link and confirms his domain ownership - then the CAA signes the CSR and sends the certificate back.
But that's not how Letsencrypt works.
Please read
You have to use a client to create a CSR and a certificate.
If you don't have root access, your hoster should support such an automation. If not, you have to do that every 60 - 85 days, because Letsencrypt certificates are only 90 days valid. So it's painful.