check out certbot + install certbot renew into crontab. Get the python3 variant the "native" package is outdated and removed from newer systems.