Understanding Certification

If you don't have, and don't want to have, a web server running even for the 30 seconds or so that each issuance/renewal would take, you can use the DNS challenge instead.