Thanks for the advice. But AWS cloud will not work in my region -- China.

> There are tools to refresh those certs automatically.

I know these tools. But I have set it up every time. And it will increase the labour work if you have dozens of domains, dozens of servers. Really troublesome to maintain only for the certificates.