Improving internet security with using DNSSEC and TLSA records.
DANE TLSA records updater using certbot internals. A drop-in replacement for certbot renew, handles the creation & replacement of TLSA records, respecting rollout periods for external daemons using the certificates.
For a more detailed explanation, head to the source: