I've just switched over @tldHIV's SSL certificate to @letsencrypt … @dotHIV is probably the first TLD registry to join this great effort.