Life after TLS-SNI-01 domain validation

For what it's worth, 0.23.0 and 0.27.0 should both fully support HTTP validation, but they'll continue to use TLS-SNI by default until Let's Encrypt disables it.

You can override that with the --preferred-challenges option.