D365FO - renew certificate with Let's Encrypt

.well-known__acme-challenge__web.config.xml

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <staticContent>
            <mimeMap fileExtension="." mimeType="text/plain" />
        </staticContent>
    </system.webServer>
</configuration>

Renew-HttpsCertificate.ps1

#Install-Module -Name Posh-ACME -Scope AllUsers

$contact = 'email@domain.com'

$domain = '...devaos.cloudax.dynamics.com'
$certNames =  @('...devaossoap.cloudax.dynamics.com')

Set-PAAccount -Contact $contact
$response = New-PACertificate -Domain $domain -DnsAlias $certNames -Plugin WebRoot -PluginArgs @{WRPath='C:\inetpub\wwwroot'; Verbose=$true} -AcceptTOS -Verbose

Install-PACertificate -PACertificate $response -StoreLocation LocalMachine -StoreName My

$site = Get-WebBinding -HostHeader $domain
$site.RebindSslCertificate($response.Thumbprint, $site.certificateStoreName)