Just heads up with Letsencrypt client Manual Authenticator mode and ACME challenge verified file, it maybe blocked by some Nginx configurations if they’re setup to block web access to dot prefixed files and folders (which the challenge verification file parent directory name format is) https://github.com/letsencrypt/letsencrypt/issues/730