Literally all you have to do is configure a cronjob to renew the cert?

I've got a website I build for a friend running that I haven't touched in 5 years TLS-wise, never had any issues.