Scan with Google Authenticator, Authy, or any TOTP app.
Manual key:
Enter your 6-digit TOTP code
Your server must be publicly reachable on port 80 for domain verification. Certificates renew automatically via cron.