If you don't trust the official letsencrypt client, you can use this script to get your free certs. It doesn't install things or ask for sudo access or your private keys or have to be run on your server (except for one challenge response one-liner you can inspect). I wrote it specifically so people who didn't trust the letsencrypt client could still get free certs.