In this short video we demonstrate how to generate a TLS certificate using let's encrypt and seal it in a JWE. We do the same for the private key.
Since the acme protocol requires a method of "proof of ownership", we are using the DNS challenge. For this, an access token is required to exercise the API. The access token is sealed in a JWE so not only the video shows the generation of JWE but also demonstrates its use to protect the DNS assets.