Multiple layers of certificate auto-renewal is cursed You cannot support DNS-01 challenges from more than one provider Read more