Let's Encrypt is great for one-off dev servers but lousy for anything at scale, and certbot doesn't work on Windows, which further limits the CA's utility. cer

Let's Encrypt is great for one-off dev servers but lousy for anything at scale, and certbot doesn't work on Windows, which further limits the CA's utility. certbot would be about a million times more useful if it shipped with support for DNS-based domain validation and dynamic DNS updates. StartSSL was at the perfect price point for my needs (which are a weird mixture of SMB with Large/Enterprise). It's a damn shame what happened to it.