Added

• Added timeout to DNS query function calls for dns-rfc2136 plugin.
• Confirmation when deleting certificates
• CLI flag --key-type has been added to specify 'rsa' or 'ecdsa' (default 'rsa').
• CLI flag --elliptic-curve has been added which takes an NIST/SECG elliptic curve. Any of
  secp256r1, secp284r1 and secp521r1 are accepted values.
• The command certbot certficates lists the which type of the private key that was used
  for the private key.
• Support for Python 3.9 was added to Certbot and all of its components.

Changed

• certbot-auto was deprecated on Debian based systems.
• CLI flag --manual-public-ip-logging-ok is now a no-op, generates a
  deprecation warning, and will be removed in a future release.

Fixed

• Fixed a Unicode-related crash in the nginx plugin when running under Python 2.

More details about these changes can be found on our GitHub repo.