Certbot timeout before dns update

Note that you only have to wait for the TXT record to copy to your main nameservers, cached DNS responses elsewhere don't matter.

I had no idea ssl dot com had a (free) ACME service, I must have missed that (or forgotten about it!).