~500 lines of POSIX shell includes DNS/HTTP challenges, multi-server deployment (ssh/ftp), account rollover/deactivation, EAB, wildcard/ip/shortlived certs.