[u-u] Expired SSL certificate

[Alan J Rosenthal]

>Free auto-generated certificates valid for 90 days (meant to be
>auto-renewed on a cron job):
>
>https://letsencrypt.org/

Also note https://github.com/diafygi/acme-tiny

>Technically rather hairy if you don't want their script to have root
>access to your machine,

Root access is not automatically required to write to the SSL-related
files -- just create a new uid for that purpose and have the files owned by
this new user, then allow it to do "sudo apache2ctl graceful" or analogous.

ajr