SSL cert automation (outside of LetsEncrypt)

[danb35 (Dan)]

This topic has some ideas about how to automate the process:

Let's Encrypt, DNS challenge, and scripting?

I have my FreePBX 15 system behind a firewall, and have no intention of opening port 80 to the world as Let’s Encrypt has always required–unfortunately, this means I can’t use the built-in certificate management to obtain and renew a cert from Let’s Encrypt. However, I’m entirely comfortable with the DNS challenge; I’m using that to get certs for probably a couple dozen devices on my LAN. I only found one earlier topic (Let's encrypt dns challenge) discussing this, but that left it at “no, Fre…

And completely agree with @dicko that DNS validation is the way to go if you can make it work. Cloudflare DNS is free and works well.