New

@zgcwkj submittted DNS validation plugins for Tencent and Alibaba Cloud, which brings us to 18 supported DNS providers, thanks!

Enhancements

When using the setting Store.CertificateStore.PrivateKeyExportable (or it legacy version: Security.PrivateKeyExportable) the program will now automatically grant read access to the private key to the administrators group. On recent version of Windows this appears to be required to allow the administrator to actually export the certificate after a renewal run by the Task Scheduler under the SYSTEM account. Reported by @mont-foray in #2529.
English names administrators and network service provided to --acl-fullcontrol or --acl-read are now automatically translated to appropriate local names on international versions of Windows. Also it's now possible to providate SIDs (e.g. S-1-5-...) for other advanced scenarios. Inspired by feedback provided by @rgomezc in #2529.
Updated various third party dependencies.
Updated the static version of the public suffix list for systems that are not permitted to download it.

In version 2.2.7 it was not possible to generate certificates with an IDN as the common name, reported by @jari-e21 in #2532.
Errors in the DnsMadeEasy plugin were not logged properly, reported by @Wlad-R in #2528.