Historically we have used LetsEncrypt at work, but the nginx container we are using has Openssl installed on it already.