The same config also works with certbot. I've used it for years.