This is useful for, e.g. OCSP stapling.

Easier to swap between the two.

Add dns-01 support, make the code more readable, add a testing
mode that will generate self-signed certificates (for test
environments that are not reachable from outside).