Last Monday, I downloaded the client, and started reading docs. It baffles my mind that it needs to install so much just to run --help on it (see pdkl95's post). After an hour of that, running the client took a minute or two. I spent another hour or two figuring out how to set up the certs and key properly with a Java keystore. Hint:

    openssl pkcs12 -export -name yourdomain -in fullchain.pem -inkey privkey.pem -out pubchainpriv.p12
    keytool -importkeystore -srcstoretype pkcs12 -srckeystore pubchainpriv.p12 -alias yourdomain -destkeystore /path/to/keystore.jks

result: https://theandrewbailey.com/

Hope I'm not leaking my private key.