Since I have been using my own dedicated servers, I first chose StartSSL, but we all know how that went, so I switched over to Let's Encrypt. Their 3-month policy is good, from a security perspective, however troublesome for me. That's why I searched and found auto-sni, which is a NodeJS server lib which auto-refreshes the certificate. Tight security is important, but good tooling is, too! Why are there not more libs like that, which automate away the annoying things 😓
I plan to go serverless next year, so I am looking into other providers, too, however I might just continue using libraries like auto-sni and stay with Let's Encrypt.