image/svg+xml Compute Web server (nginx) Web service ACME client (diplonat) ACME CA server HTTP HTTPS HTTP: /.well-known/acme-challenge/<token> Storage 1 2 3 Issuecert. Store Locate