crontab -e  # As root

# And add the following line to renew at 4:24am on 3rd day of month
24 4 3 * *  certbot renew --post-hook "systemctl restart slapd"