I have been looking at this Let's Encrypt client for a little while. It was just merged into the OpenBSD base system, and had its name changed from 'letskencrypt' to the generic 'acme-client'. The name might be too generic; I found at least 4 different programs with this name.
https://kristaps.bsd.lv/acme-client/ Some attempt has been made to reduce the risks inherent to running the program as root, as described on the home page. And, I did a minimal test: I was able to get a new certificate. Leo Famulari (1): gnu: Add acme-client. gnu/packages/tls.scm | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) -- 2.9.3