I've used acme-tiny for years to manage about 10 certificates and it's great for what it is. But it has 1 problem in that you can't do DNS based validation wit

I've used acme-tiny for years to manage about 10 certificates and it's great for what it is. But it has 1 problem in that you can't do DNS based validation with it, which means no wildcard certs. Generally speaking I prefer DNS validation even without wildcard certs too because it means your web server only ever has to think about serving the certificates. Your web server doesn't even need to be up to do a challenge request when you use DNS challenges. I've moved onto using acme.sh and it's been very good. It supports a lot of DNS host APIs too (DigitalOcean, Cloudflare and like 50 others).