Running certbot-auto gives this output:
Error: couldn't get currently installed version for ...
File "/opt/eff.org/certbot/venv/local/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 140, in init_static_locks import("_ssl") ImportError: No module named _ssl
This occurred after a dist-upgrade from Debian 7 -> Debian 8