Generate .p12

certbot certonly --manual --preferred-challenges dns --agree-tos -d onion.pics -d *.onion.pics

cd /etc/letsencrypt/live/onion.pics
rm -f full.pem full.p12
cat fullchain.pem privkey.pem > full.pem
openssl pkcs12 -export -out full.p12 -in full.pem

Edit