Hi...
If a new domain or subdomain is set up with .htaccess to only allow access from a certain set of IP addresses, the challenges that are sent from cloud based hosts in various countries don't work.
In that case, if the HTTP-01 challenge or DNS-01 challenge works OK, is that sufficient to see the certificate installed and renewed?
Thanks!
Mark