Remediation Steps

Follow the steps below to remediate this finding on Nginx webserver.

If using Let's Encrypt with Certbot, renewal is automatic via a cron job or systemd timer:
```
sudo certbot renew --dry-run
```
If renewal is not automatic, run:
```
sudo certbot renew
```
Reload Nginx after renewal:
```
sudo systemctl reload nginx
```
For commercial certificates, replace the certificate files and reload Nginx.