letsencrypt is great but so is spending 50$ for 5 years on a multi-domain wildcard cert especially when you run a server that puppets renewals to dozens of servers and certbot is fucking gay and now requires rust or the usage of rust-bin on gentoo
eeaaasy choice