@prologic@twtxt.net @movq@www.uninformativ.de Before switching to LE, we ran our own CA. Once setup, three shell scripts for a new cert, renewal and revocation were all we needed. And a weekly cron job reporting certs which were about to expire.