#tls

acme.sh adoption should start with the certificate renewal risk model

The useful question is not whether acme.sh can issue a certificate, but whether renewal, DNS credentials, deploy hooks, reloads, logs, and recovery are governed.