Get a letsencrypt cert, I always get a massive wave of vulnerability probers after renewing.