Currently it supports only HTTP-01 challenges (no wildcards, must be reachable).