@jeroen @IPngNetworks Ah, at some point Certbot gained the ability to do acme-dns challenges; that’s how I’ve been requesting certificates for sites in my homelab (where acme-dns is the only option because those DNS subdomains don’t resolve outside of my network). I was curious about the specifics of how certificates were being distributed, so thanks for explaining that!