Solve ACME http-01 challenge without opening port 80 to the internet, obtain certs from an external certificate authority.