In addition to the excellent advice already given you should review the Let's Encrypt Revocation page.
Keep in mind the comments on that page about OCSP will soon be obsolete for LE
In addition to the excellent advice already given you should review the Let's Encrypt Revocation page.
Keep in mind the comments on that page about OCSP will soon be obsolete for LE