[cpach]

There’s also the DNS-01 challenge that works well for devices on private networks.