automatic certificate renewal. Seems CloudFlare puts a spanner in the works, but this script [kappataumu.com] seemed to work better. We'll see, though.