Let's Encrypt requires a bit of initial configuration.

First of all, the system must be reachable from the Internet for validation! To verify that, the host command may be used.

host -t A service1.example.com
service1.example.com has address 1.2.3.4

To configure the service, switch to the App Settings below. Set your desired domain(s) and services and click "Save changes".

The app always starts obtaining a new certificate when changes are saved! Once the certificate is successfully obtained, Let's Encrypt is fully set up and renews the certificate on it's own.

If you want to change the hostname in the certificate later on, just change the configuration in the App Settings and save.

If you encounter problems with the obtained certificate, please have a look at the log file /var/log/univention/letsencrypt.log. All actions of the app are written to this log file. Also, refer to the "Troubleshooting" section in the original article about Let's Encrypt in the Univention Wiki.