Letsencrypt refusing to renew certs because Google thinks the site is malicious is an *interesting* new threat model to contend with.
@joeyh that is interesting. I didn't realize Let's Encrypt was using Google's Safe Browsing API. There's a bit more about LE's stance on this here: https://letsencrypt.org/2015/10/29/phishing-and-malware.html
Octodon is a nice general purpose instance.