Issue a new certificate connection refused

[schoen]

Whitelisting Let's Encrypt validation addresses is not a supported option; a very recent post mentioning that is at

HTTP Port open to the whole world - Security suggestions

H…