Use Azure Automation with the Let's Encrypt free certificate authority to create, validate and install certificates on a firewall.

You can still automate Let's Encrypt even if your system requires a DNS challenge. Using these PowerShell scripts and Amazon Web Services' DNS service Route 53 will do the trick.

Let's Encrypt has IP address-based certificates available in Staging, but they'll be more widely available for production use later in 2025.

Some Let's Encrypt users have to renew their certificates after a CAA rechecking bug was discovered. Let's Encrypt will start revoking affected certificates beginning 00:00 UTC March 4.