New features

• The program can now check for the availability of a new version, either from the "Extra options" menu, or automatically on every run by setting Client.VersionCheck to true in settings.json. This is disabled by default for privacy reasons.
• The PemFiles store plugin can now optionally password-protect the -key.pem file. A default password can be set in settings.json and it can be specified on the command line via the --pemfilespassword

Enhancements

• The TransIP-plugin can now be used from the command line using --transip-privatekeyfile or --transip-privatekey.
• #1756 - To protect users from themselves, the CertificateStore plugin will now refuse to delete the previous version of the certificate from the store if it detects that it's still in use by IIS. This bites new users that manually bind the certificate to IIS instead of using the appropriate installation plugin. If the installation plugin is not chose, the certificate will still expire though.
• #1761 - Sorting of bindings now happens in a DNS aware way instead of purely alphabetically, making it easier to find the binding(s) that you're looking for, thanks @jscarle for the idea.

Bug fixes

• #1747 - Do not give a warning about an unhealthy task if the user includes --verbose in the arguments, thanks @tsimmons.
• #1718 - Fix crash bugs on alternative ACME services (non-Let's Encrypt), thanks @Stan-Tastic and @Thomas-Stu for collabating on this.
• #1749 - "Manual" renewals were not always properly imported from v1.9.x, discovered by @tommykoch.