You don't need Apache running to create an SSL certificate. The issue with Apache should be different. Let's try to fix the certificate generation and after that fix Apache config.
Can you try running the command below to check the IP address that the bncert tool is getting?
sudo getent hosts gturkistani.net
If that IP address is different than the IP address of your instance, then it means that the DNS information is not properly propagated everywhere. You can try to workaround this by running the bncert tool as shown below, but we highly recommend you to check your DNS settings and its propagation with your DNS provider
sudo /opt/bitnami/bncert-tool --perform_public_ip_validation 0 --perform_dns_validation 0