Comment by bryogenic

https://go-acme.github.io/lego/ is exactly that. This is the client/library underneath traefik's batteries included version of let's encrypt certs.