Open Internet by MindsNetHAProxy native ACME worked. Proving it served the new cert was the hard part.