Do not permit to add subdomains of domain acme.invalid
Do not permit to add subdomains of domain acme.invalid in ISPConfig as a precaution for Let's Encrypt - TLS-SNI-01 issue. ISPConfig itself uses webroot auth with Certbot, so SSL certs that were generated with the LE option in ISPConfig are not affected by this issue.