I've been working on an internal service backed by Let's Encrypt, allowing any number of endpoints to add, delete, or download certificates for their own purposes, while offloading certificate renewal to the internal service itself. This has allowed for easy SSL certificates everywhere, without needing to