Unfortunately there isn’t any real free lunch here
You either pay in:
- money (commercial ssl certificate) or
- time/expertise (letsencrypt and knowing how to use their official client) or
- time/expertise (letsencrypt and knowing how to use various other alternative clients listed at List of Client Implementations some of which do not require root access)