@stratself I am using the shortlived profile since about February this year. Works as designed. Cert renewal is done via mod_md in apache2. No additional script like certbot needed. I had to switch
MDProfile tlsserver
to
MDProfile shortlived
in the md.conf. Renewal is done at 33 % remaining lifetime by default.