[another-dave]

Literally all you have to do is configure a cronjob to renew the cert?

I've got a website I build for a friend running that I haven't touched in 5 years TLS-wise, never had any issues.

[zamadatix]

For public websites most probably don't even need to touch cron as Apache/Caddy/NGINX/Traefik have built-in options these days. The only time I run something like a cron task is for certain internal IoT type certs.