You could use the official client with the --standalone flag — that's actually what nginx users have to do right now, as there's no automagic vhost configuration for nginx with the official client yet. The client spins up an HTTP listener on port 80 or 443 for the domains you've specified and listens for the challenge. Then your certs are live in /etc/letsencrypt.