> Or have that VM be entirely in charge of certificate renewal, and give it access to your certificate store somehow? This is what I'd prefer, I think. The thi

> Or have that VM be entirely in charge of certificate renewal, and give it access to your certificate store somehow? This is what I'd prefer, I think. The thing is, part of the appeal of Let's Encrypt is the readily available ACME client that JFDI. Such an easy-to-use client doesn't currently exist for this use case.