Issues a real 90-day certificate from Let's Encrypt, including wildcards. Your private key is generated in your browser and never sent to this server.
One per line (or comma-separated), up to 10. Wildcards like *.example.com need DNS-01 validation.
Used only for Let's Encrypt expiry notices.