If you follow the standard install you’ll have a letsencrypt certificate which is supported and automatically renews.
If you want to use a custom certificate, there exists a topic describing how to do it.
「いいね！」 2