So i just found out my registrar (Porkbun) offers free Let's Encrypt certificates for root domain and subdomain!! I was previously using certbot to do the same thing but that got messy and i had to generate new certs for each subdomain (i got alot of em really) so now i am rewriting my entire Apache vhost setup to use these new certs. But stuff seems to be slightly breaking so expect some (not too much) downtime!