in-case core-devs from LE lurk here: check out Cordon, a draft-ietf-plants-merkle-tree-certs-03 compliant CA and ACME server. its being used in a private mixnet now.

bonus points: its AOT compiled dotnet

https://github.com/maceip/cordon