Second this. You don’t even need the endpoint to be publicly accessible. Use DNS-01 with letsencrypt and have a local dns server that internal hosts resolve that hostname to a local Ip.

Don’t forget the part where he fixes the deficit enough but doesn’t do anything else meaningful for the Soc dems, doesn’t go fast enough for the normal “dems” and then gets replaced by a republican next cycle anyway