This is my first try as configuring an Nginx web server to use HTTPS instead of HTTP on a self-hosted Debian host. I successfully installed and ran Certbot.
I'd like to make sure it's OK to use Let'sE with…
a dynamic IP, and
a sub-host provided by eg. www.dynu.com instead of a user-owned domain
?
You're free to use Let's Encrypt with any sort of IP and/or domain name you want, so long as you can show control over that domain name, subject to the rate limits.
That's fine. Also, when using a certificate of a hostname, the IP address isn't being validated at all.. So static, dynamic, doesn't matter from the perspective of the certificate or TLS library doing the validating on the clients end.