This was profoundly useful to me and our organization. Thanks so much for the time and effort in placing this information here.
I suppose my last question is, so we need to run this Powershell script once every 3 months (6 months?) to renew the Let's Encrypt's cert? Anything else necessary?