I have a couple of SMG devices I have been managing for a while.  One services my production domain while another is used for testing on a personal domain.  SSL/TLS has been set up on my Production SMG box and now I am looking to enable TLS/SSL on my test device.  Unfortunately, I don't fully remember how I initially integrated my certs onto the production machine.  It may very well have been by manually establishing a cert pair with a very long expiration period (10 years).

I have also set up SSL on my GMS systems using LetsEncrypt/Certbot but that was not the method with SMG...

In any case...  Anyone have any general recommendations of which processes might integrate most easily with SMG for the creation and maintenance of SSL certs?  I don't want to have to manually remember/request/download/install SSL certs every 90 days.  So before I consider fabricating a set of certs with a very long expiration, I am curious what method other folks have been using..

Thanks in advance!

Ed