You just need access to your web server configuration, which usually means root access to the hosting machine.
The current host is 1and1.. I don't think they support that, since they desperately are trying to sell you their own certificates. Also is shown on the certbot site with a big red cross :)
Either way, probably a good reason to finally switch hosts.