cp /etc/letsencrypt/live/mysite.com/{chain,cert}.pem /var/lib/mysql/
openssl rsa -in /etc/letsencrypt/live/mysite.com/privkey.pem -out /var/lib/mysql/privkey.pem
chmod 400 /var/lib/mysql/*.pem
chown mysql:mysql /var/lib/mysql/*.pem