Well if you are using letsencrypt with a password protected website is hard to renew the ssl because you need to bypass that .
If you have access to httpd conf the easy solution is to add this
<Directory /var/www/path/.well-known/> Order allow,deny Allow from all Satisfy any </Directory> Then restart the apache/httpd.