Life after TLS-SNI-01 domain validation

A recent thread about that concern:

(One likely suspect is any version of Certbot prior to 0.28 or especially prior to 0.21, as I mentioned above.)