The annoying thing about Let's Encrypt certificates is that they are issued for a maximum of 90 days. This requires at least four renewals every year, which is why scripting their renewal is the only real solution.