[throw0101a]

> Then you need two domain name servers to serve your domain.

Or, as I explained further down, a sub-domain.

> And you need to write and maintain code to talk to the API of the second nameserver.

Which was several dozen lines of shell (used as a hook in our LE client), which we haven't needed to touch since we wrote it a year ago. Hardly a Sisyphean task.

> That's what I call a pain in the ass.

Often less of a pain than dealing with many CAs manually.