I noticed that by default, the client assumes that you’re running a publicly accessible web server on port 80. This is not the case for my domain; I only run a server on 443 and connections to 80 aren’t even allowed through the firewall.
Looking through the plugins/manual.py code, there appears to be support for TLS per the ACME spec, but modifying it to true there still seems to set the URI HTTP and not HTTPS. How do I initiate a request that will only try to authenticate back to my server over https/443?