I use the lego[1] client for DNS verification and it works pretty well so far (more deets[2]).<p>[1]: <a href="https:&#x2F;&#x2F;github.com&#x2F;xenolf&#x2F;lego" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;xenolf&#x2F;lego</a><p>[2]: <a href="https:&#x2F;&#x2F;disjoint.ca&#x2F;til&#x2F;2016&#x2F;03&#x2F;26&#x2F;lets-encrypt-tls-certificates-using-route53-dns-verification&#x2F;" rel="nofollow">https:&#x2F;&#x2F;disjoint.ca&#x2F;til&#x2F;2016&#x2F;03&#x2F;26&#x2F;lets-encrypt-tls-certific...</a>