Why not give it a try with @pfaffman’s tutorial (that @itsbhanusharma shared above)? It will just handle the certificates. I’ve actually followed it a few times now and I’m still in awe how it simplifies the matter!
Truth be told it has a downside in that you will get greedy and spin up an additional instance for any little task… I think I’m at 7 now and need more 