diff --git a/utils/post_cert_renewal/post_cert_renewal.sh b/utils/post_cert_renewal/post_cert_renewal.sh
new file mode 100755
index 00000000..2ee902c0
--- /dev/null
+++ b/utils/post_cert_renewal/post_cert_renewal.sh
@@ -0,0 +1,15 @@
+#!/bin/bash
+
+# copy this script into /etc/letsencrypt/renewal-hooks/post
+# to test: sudo certbot renew --dry-run
+
+# copy the certificates into /etc/vernemq
+cp -Lp /etc/letsencrypt/live/resqapi.jankstudio.com/*.pem /etc/vernemq
+
+# change ownership and group of the certificates from root to vernemq
+chown vernemq:vernemq /etc/vernemq/*.pem
+
+sudo systemctl restart vernemq.service
+sudo systemctl restart mqtt_sender.service
+sudo systemctl restart riderloc.service
+