Certbot defaults to a path on your system that requires root, and sets permissions so non-root users can't look at your private keys. If you would like to use

Certbot defaults to a path on your system that requires root, and sets permissions so non-root users can't look at your private keys. If you would like to use it without root/sudo, you can pass flags changing the directory it uses. For example: certbot --logs-dir ~/SSL --work-dir ~/SSL --config-dir ~/SSL