What do you mean? I used self-signed for communication b/w LB and the nginx serving backend

Edit: I don't see any "machine name" on crt.sh for public LB which uses LE

Ah, you meant the DNS address is on CT now. You think I wouldn't know that? Regardless, a dns01 challenge is far better than using self-signed at home