@letsencrypt I've used it on production servers. Was trivial to set up and can renew itself.

It can renew itself.

That alone should make every busy sysadmin smile.