yes actually, cert generation seems to be a common issue as well. Do you know if the caddy module works fairly well? That could be worthwhile