/usr/bin/letsencrypt is in certbot 0.23.0-1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/bin/certbot
/usr/bin/certbot