@ada except that: "Since automation of issuance and renewals is really important, it only makes sense to use DNS-01 challenges if your DNS provider has an API you can use to automate updates" and on the list of registrar APIs "NameCheap is intentionally not included because they do not open API access unless some opaque requirements are met (spend at least $x)."