You can reissue the certificate by clicking the reissue option in the ssl/tls settings for your domain. then once on the page, goto the very bottom and click the lets encrypt option. then it will bring up a list of options that you can choose. check all of them except the wildcard option since it isn't supported yet. then click the get it free button.