@brnrd @adamshostack @xabean
The problem using DNS–01 validation scheme is that now all of my various servers will have permission to directly update DNS entries. TLS – 01 allows things to at least stay all on the same server and not spanning multiple.