Just about. In another thread, @LeonA recently found that it sort of works (over TCP, which ordinary resolvers won't use without reason, so it doesn't help), there are more details from Let's Encrypt, and it seems to be actually working right... sometimes.