Too bad 
Hm. I now read e.g. [SOLVED] Proxy settings in order to use letsencrypt-auto behind a proxy. So, maybe we'll have to use a proxy .
At the moment, acme-v01.api.letsencrypt.org is really the only host that the certbot client connects to, right?