This is a port (by Wolf) of acme-client from OpenBSD.
It seems to work fine, way simpler to use than certbot with far less
dependency hell. As far as I can tell it does not support OCSP
must-staple so the program is modified to introduce this feature.