Making Lancert a Better ACME Client

When I first introduced Lancert , it answered a fairly specific question: Can publicly trusted TLS certificates be issued for services running on private networks, without exposing those services to the public Internet? Once that part became reliable, the interesting questions changed. Lancert already knew how to issue certificates, cache them and renew them automatically. Users remained…