Certbot "Exiting abnormally" if CSR uses PrivKey with ec parameters encoded (=param_enc explicit)

Sounds like this (native Certbot support) is the best path forward

Depends on what that native certbot support will do. That's unclear,

and

the work is already in progress.

has no current ETA