TL;DR The DNS you’re using for a given domain may not have a suitable API for automating DNS-01 challenges, but that can be worked around by delegating to a sub domain (say acme.example.com) hosted somewhere that has a decent API. Background I was recently setting up some new services that would need TLS certificates. One […]