For me personally, one that's well supported by DNS-01 providers for let's encrypt.

Unfortunately there's not that many and often the process is broken.