What year is it? If you're running a barebones server, just use certbot. It'll automatically renew your certs. Very easy to set up and it's been stable for years without touching it.