Check your DNS file to make sure you don’t have a CNAME record that redirects example.com to community.example.com.
If you are using the official install guide with a Let’s Encrypt SSL certificate, it is set up to auto-renew.
As for installing an SSL certificate for the primary domain, here are some example guides: