Shouldn’t be too difficult to swap it out for ZeroSSL. You’d need to remember to update CAA records though.