We use the certs automatically issued by GCP, which are also letsencrypt issued.