Why would they start charging? Auto-renewing certificates with Let's Encrypt are easy to do.

as long as you only have a single server, or a DNS server that has an API.

Even certbot got deprecated, so my IRC network has to use some janky shell scripts to rotate TLS… I’m considering going back to traditional certs because I geo-balance the DNS which doesn’t work for letsencrypt.

The issue is actually that I have multiple domains handled multiple ways and they all need to be letsencrypt capable for it to work and generate a combined cert with SAN’s attached.