A certbot hook that publishes the challenge through the NameOcean API, for servers anywhere.
Mail to an address on your domain arrives at your HTTPS endpoint as signed JSON.
A Flask, Django, Node.js or Next.js app on a NameOcean App Server, from the first push to your domain.
Keep the zone in a YAML file, review changes in pull requests and apply them from CI.