Is there a way I can just provide a CSR and get a cert manually?

Howcome? Certbot can also run without direct Apache integration.