I have found a solution.
Assuming you have used the bncert tool to generate Let's Encrypt certificates, the necessary apache configurations and .well-known/ folder will already exist.
All you need to do is place the apple-developer-merchantid-domain-association file here:
/opt/bitnami/apps/letsencrypt/.well-known/