Let's Encrypt short-lived certificates are quite strict, so you should use an ARI-capable client

Let's Encrypt short-lived certificates are much harder than they look if you think of them as just a shorter version of 90-day certificates. If you issue and renew multiple certificates for multiple subdomains in a short interval, you can hit certificate issuance rate limits more easily. Short-lived certificates increase the number of renewals, so these limits become much more visible. https://letsencrypt.org/docs/rate-limits/ You should test in the staging environment first For development and