Ok, the wiki threw me off. I've copied from /etc/apache2/ssl/certs/ into .config/resilio/sync
To keep it private I've added to /etc/resilio-sync/config.json
"login" : "DESIRED_LOGIN",
"password" : "",
le-post-hook.sh commands I added (as listed in the wiki) via
sudo crontab -e. Resilio is working fine now with SSL (and hopefully past 3 month mark). Thanks for the pointers.