or better yet, don't use ssh for this purpose, it's not good for it. letsencrypt is free, you might hate the browser for many fair reasons, but PKI and the CA/

or better yet, don't use ssh for this purpose, it's not good for it. letsencrypt is free, you might hate the browser for many fair reasons, but PKI and the CA/B forum are actually effective.