Looks awesome , but i think still need some more stuff , something like a flamethrower or two , even more , a couple of flaming flail never hurt nobody <| sep |> You ' ve got three options to prove to them you control a FQDN Let ' s Encrypt won ' t issue certificates for any other sort of name or address , only Fully Qualified Domain Names from the public Internet DNS . You can serve up the right answers on a particular magic HTTP URL on port 80 you can serve up the right magic X . 509 certificate for a madeup SNI server name on a TLS connection on port 443 or you can add a magic DNS TXT record . Organization validated certificates OV are of very dubious value . IF your visitors examine the certificate by hand and IF they know what they ' re looking at , now they know your organisations ' legal name and place of business . Otherwise it makes no difference that you got the extra details validated and include in the certificate for $$$ because nobody knows that , the web browser itself only looks at the domain name .