You could still use Let's Encrypt on PA by setting up a daily Scheduled Task, which does:
-
1) checks expiration date of existing certificate:
$ openssl x509 -enddate -noout -in ~/letsencrypt/www.example.com/cert.pem
notAfter=Apr 28 17:40:22 2018 GMT
-
2) compares it with current date and if difference in future is less than a week:
-
3) performs a renew of Letsencrypt cert by executing dehydrated:
$ cd ~/letsencrypt && ~/dehydrated/dehydrated --cron --domain www.example.com --out . --challenge http-01
-
4) sends an email to support@pythonanywhere.com kindly asking to install the new cert from folder:
/home/eieiomeisr/letsencrypt/www.example.com/ (for domain: www.example.com);
also add Cc your address to this message, so you get it once in ~3 months as confirmation/reminder.
Change your username/domain accordingly and maybe forget :)