I had a lot of trouble getting certificates updated while running on my OpenWRT router. But other things were easy but tedious, like setting up a DNS record on one of my domains, and temporarily opening ports for it an certbot (a rust clone) etc. But now I feel I understand it all and tweaks should be easy from now on.