I don't know…
For me, I'm with a 4.14 kernel from the backports repo, which installed me certbot v0.23 as I suppose, which is running with python 3.x
At the moment, this should work as it seems that I have the necessary packages to… but there is a mystery that I have to understand before my cert expired…