one quick note:
acme also can be done over dns; in that case the printer would not need
to be globally accessible; only a dns name would have to be, and only
for a few seconds every so often. (once every 3 months for letsencrypt;
other acme providers likely have there own renewal schedules.)
-JimC
--
James Cloos <cloos at jhcloos.com> OpenPGP: 0x997A9F17ED7DAEA6