The TP-Link T1600G-28PS switch (and similar in that family) support ssl, and the certificate and key can be set programmatically over telnet. This repository includes a letsencrypt deploy hook ...