It it also possible to perform DNS validation, which is my preferred method as I can automate certificate generation/replacement from Ansible.