Hello,

Reading about how to add a Letsencrypt certificate, I observed most used a DNS challenge.

As all Mikrotik boxes are shipped with a pre-configured VPN that defines a specific 123456789abcd.sn.mynetname.net-like hostname, would it make sense if this hostname could be used to get an almost out-of-the-box Letsencrypt certificate through a DNS challenge ?

To me, what is currently missing beside provisions on mynetname.net DNS servers, is a simple script within Mikrotik boxes, to securely update a remote TXT record.

Are you aware of any vendor shipping pre-configured Letsencrypt hardware ?
Thoughts ?

Best regards