go-acme/lego ? reverse-engineered prompt

Build me a Go tool and library that can automatically get, renew, and revoke HTTPS certificates from Let’s Encrypt and other ACME providers.

I want it to support the common ACME challenge types, so I can verify domains by HTTP, DNS, or TLS, and also handle things like wildcard certificates, SAN certificates, IP address certificates, and certificate bundling. It should work both as a command line app and as something other Go projects can import and use.

Make it practical for real world use, with support for lots of DNS providers so users can automate DNS validation without manual steps. If you need to check the latest ACME or provider docs online while building it, do that.

Please include good docs, sensible defaults, and a clean way to register with a CA, request a cert from scratch or from an existing CSR, and renew or revoke later.