To renew on a system without a webserver. Make sure firewall is open.

certbot renew --standalone