This is basically where I am. I have a VPN appliance I have to maintain. It's a manual process to update the certificate. Just about everything else I use runs LetsEncrypt, but this VPN box has a nine dollar cert from Namecheap because nine dollars is totally worth not having to manually deal with the certificate replacement more often than once a year.