@3GLighting Yes, you could reconfigure to use Let’s Encrypt and automate it. This works well for passbolt instances that are public facing and have port 80 open (LE docs).
It is possible to use your own certs. I think recently I am learning that some aspects of the healthcheck are not accommodating to wildcard certs. Like here Version Mismatch on Debian - #6 by clayton
I have not used wildcard certs, and do use Let’s Encrypt but it’s not automated through the app because one instance is not public-facing. So there are many options.