If you’re using let’s encrypt, it’s worth automating the cert renewals. Even for systems where the automation is difficult and not supported.

It’s also worth running some kind of monitoring system. You can check certificates with OpenSSL really easily. Fire off a message to NTFY.