Let's encrypt does not auto renew it certificates. I have to turn off the firewall for it

You need to open the Let’s Encrypt service to Internet. See this video: