HTTP-01 reachability

GET http://{host}/.well-known/acme-challenge/{token} on a public hostname. Private IPs are blocked. We do not follow redirects to internal addresses.