After trying out different ACME clients, like dehydrated or getssl, I always came back to certbot. But now, I have finally switched to acme.sh, which, as a simple shell script, is compatible with my KISS ideology. It is used by some big projects like FreeBSD and Proxmox, for their SSL needs. Lots of features Out of the box, you get support for over 70 DNS hooks (from cloud providers like Amazon to actual software like PowerDNS).