Update CSR before expiration with bash script

Or, consider using a different hosting provider that better supports Let's Encrypt, including one that provides a similar software stack overall.