Put a reverse proxy like traefik, nginx, caddy, etc in front of your bullshit that can and cannot support modern certificates and move on with your life