My main gripe about certbot is that it requires a plugin to essentially send a SIGHUP to apache/nginx/etc. Openbsd acme-client got this right and left that functionality out of itself.