diff --git a/acme/setup.py b/acme/setup.py
index c5214f7b9..35d0f6c74 100644
--- a/acme/setup.py
+++ b/acme/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 setup(
     version=version,
diff --git a/certbot-apache/setup.py b/certbot-apache/setup.py
index b5b675b73..997bc64b3 100644
--- a/certbot-apache/setup.py
+++ b/certbot-apache/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin
diff --git a/certbot-ci/setup.py b/certbot-ci/setup.py
index c5214f7b9..35d0f6c74 100644
--- a/certbot-ci/setup.py
+++ b/certbot-ci/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 setup(
     version=version,
diff --git a/certbot-compatibility-test/setup.py b/certbot-compatibility-test/setup.py
index c5214f7b9..35d0f6c74 100644
--- a/certbot-compatibility-test/setup.py
+++ b/certbot-compatibility-test/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 setup(
     version=version,
diff --git a/certbot-dns-cloudflare/setup.py b/certbot-dns-cloudflare/setup.py
index c8337eb11..77411a51e 100644
--- a/certbot-dns-cloudflare/setup.py
+++ b/certbot-dns-cloudflare/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     # for now, do not upgrade to cloudflare>=2.20 to avoid deprecation warnings and the breaking
diff --git a/certbot-dns-digitalocean/setup.py b/certbot-dns-digitalocean/setup.py
index 90e3d8d82..7d5799a6e 100644
--- a/certbot-dns-digitalocean/setup.py
+++ b/certbot-dns-digitalocean/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'python-digitalocean>=1.15.0', # 1.15.0 or newer is recommended for TTL support
diff --git a/certbot-dns-dnsimple/setup.py b/certbot-dns-dnsimple/setup.py
index 19e4c712b..8d26c0311 100644
--- a/certbot-dns-dnsimple/setup.py
+++ b/certbot-dns-dnsimple/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     # This version of lexicon is required to address the problem described in
diff --git a/certbot-dns-dnsmadeeasy/setup.py b/certbot-dns-dnsmadeeasy/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-dnsmadeeasy/setup.py
+++ b/certbot-dns-dnsmadeeasy/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-dns-gehirn/setup.py b/certbot-dns-gehirn/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-gehirn/setup.py
+++ b/certbot-dns-gehirn/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-dns-google/setup.py b/certbot-dns-google/setup.py
index 1602a129e..dab7cd5a2 100644
--- a/certbot-dns-google/setup.py
+++ b/certbot-dns-google/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'google-api-python-client>=1.6.5',
diff --git a/certbot-dns-linode/setup.py b/certbot-dns-linode/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-linode/setup.py
+++ b/certbot-dns-linode/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-dns-luadns/setup.py b/certbot-dns-luadns/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-luadns/setup.py
+++ b/certbot-dns-luadns/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-dns-nsone/setup.py b/certbot-dns-nsone/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-nsone/setup.py
+++ b/certbot-dns-nsone/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-dns-ovh/setup.py b/certbot-dns-ovh/setup.py
index dd21660f2..67cfba4a6 100644
--- a/certbot-dns-ovh/setup.py
+++ b/certbot-dns-ovh/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.15.1',
diff --git a/certbot-dns-rfc2136/setup.py b/certbot-dns-rfc2136/setup.py
index 358ae573a..a7635221f 100644
--- a/certbot-dns-rfc2136/setup.py
+++ b/certbot-dns-rfc2136/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     # This version was chosen because it is the version packaged in RHEL 9 and Debian unstable. It
diff --git a/certbot-dns-route53/setup.py b/certbot-dns-route53/setup.py
index 4b57f1eec..f1c058b1d 100644
--- a/certbot-dns-route53/setup.py
+++ b/certbot-dns-route53/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'boto3>=1.20.34',
diff --git a/certbot-dns-sakuracloud/setup.py b/certbot-dns-sakuracloud/setup.py
index e811970d5..0a11d2011 100644
--- a/certbot-dns-sakuracloud/setup.py
+++ b/certbot-dns-sakuracloud/setup.py
@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',
diff --git a/certbot-nginx/setup.py b/certbot-nginx/setup.py
index a6430df29..cb4914120 100644
--- a/certbot-nginx/setup.py
+++ b/certbot-nginx/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin
diff --git a/certbot/docs/cli-help.txt b/certbot/docs/cli-help.txt
index 50a17e92e..c00cc7947 100644
--- a/certbot/docs/cli-help.txt
+++ b/certbot/docs/cli-help.txt
@@ -68,6 +68,11 @@ options:
                         already have a certificate with the same name. In the
                         case of a name conflict, a number like -0001 will be
                         appended to the certificate name. (default: Ask)
+  --ip-address IP_ADDRESSES
+                        IP addresses to include. For multiple IP addresses you
+                        can use multiple --ip-address flags. All IP addresses
+                        will be included as Subject Alternative Names on the
+                        certificate. (default: [])
   --eab-kid EAB_KID     Key Identifier for External Account Binding (default:
                         None)
   --eab-hmac-key EAB_HMAC_KEY
@@ -142,7 +147,7 @@ options:
                         case, and to know when to deprecate support for past
                         Python versions and flags. If you wish to hide this
                         information from the Let's Encrypt server, set this to
-                        "". (default: CertbotACMEClient/5.2.2 (certbot;
+                        "". (default: CertbotACMEClient/5.3.0 (certbot;
                         OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY
                         (SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel).
                         The flags encoded in the user agent are: --duplicate,
@@ -704,17 +709,17 @@ manual:
   Authenticate through manual configuration or custom shell scripts. When
   using shell scripts, an authenticator script must be provided. The
   environment variables available to this script depend on the type of
-  challenge. $CERTBOT_DOMAIN will always contain the domain being
-  authenticated. For HTTP-01 and DNS-01, $CERTBOT_VALIDATION is the
-  validation string, and $CERTBOT_TOKEN is the filename of the resource
-  requested when performing an HTTP-01 challenge. An additional cleanup
-  script can also be provided and can use the additional variable
+  challenge. $CERTBOT_IDENTIFIER will always contain the domain or IP
+  address being authenticated. For HTTP-01 and DNS-01, $CERTBOT_VALIDATION
+  is the validation string, and $CERTBOT_TOKEN is the filename of the
+  resource requested when performing an HTTP-01 challenge. An additional
+  cleanup script can also be provided and can use the additional variable
   $CERTBOT_AUTH_OUTPUT which contains the stdout output from the auth
   script. For both authenticator and cleanup script, on HTTP-01 and DNS-01
   challenges, $CERTBOT_REMAINING_CHALLENGES will be equal to the number of
-  challenges that remain after the current one, and $CERTBOT_ALL_DOMAINS
-  contains a comma-separated list of all domains that are challenged for the
-  current certificate.
+  challenges that remain after the current one, and $CERTBOT_ALL_IDENTIFIERS
+  contains a comma-separated list of all identifiers that are challenged for
+  the current certificate.
 
   --manual-auth-hook MANUAL_AUTH_HOOK
                         Path or command to execute for the authentication
diff --git a/certbot/src/certbot/__init__.py b/certbot/src/certbot/__init__.py
index 571742ef6..2d0fa7c72 100644
--- a/certbot/src/certbot/__init__.py
+++ b/certbot/src/certbot/__init__.py
@@ -1,4 +1,4 @@
 """Certbot client."""
 
 # version number like 1.2.3a0, must have at least 2 parts, like 1.2
-__version__ = '5.3.0.dev0'
+__version__ = '5.3.0'
diff --git a/letstest/setup.py b/letstest/setup.py
index c5214f7b9..35d0f6c74 100644
--- a/letstest/setup.py
+++ b/letstest/setup.py
@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.3.0.dev0'
+version = '5.3.0'
 
 setup(
     version=version,
diff --git a/packages/SHA256SUMS b/packages/SHA256SUMS
new file mode 100644
index 000000000..30bda0203
--- /dev/null
+++ b/packages/SHA256SUMS
@@ -0,0 +1,17 @@
+015b6159ceb1cdf789aa79084e8f5e9e5f0515bb110d452aac03ad52db35bb74  acme-5.3.0.tar.gz
+8e0768337b4bcbd33891d4841f4693c3a1e6649bffc52069a13012251209d757  certbot_apache-5.3.0.tar.gz
+60f1eca573d3726aa5a1a2f1177fb436d83ed7cb5514724cae8945c01b3f55a7  certbot_dns_cloudflare-5.3.0.tar.gz
+40111095f48fed86643bb93953cb8ebd55c445388afb837405a4797a1040ecf8  certbot_dns_digitalocean-5.3.0.tar.gz
+0aedb176026f22977793bc9d206d497f9d6b00dd0be68274287fc40891594e02  certbot_dns_dnsimple-5.3.0.tar.gz
+51ff2267858ab63ddc722566c8ca8ac4538a2a277d91c19f6cda2cf17fc1cdac  certbot_dns_dnsmadeeasy-5.3.0.tar.gz
+957c10c54e31c995692e571d6b99784b6c07550b8c93e6ccdd83ce97389ed2e7  certbot_dns_gehirn-5.3.0.tar.gz
+ff62412d42749be94b1166a1dc5545d23d0f28757e5aa6659586ba69bf991033  certbot_dns_google-5.3.0.tar.gz
+b4824e6db2f6e21e9152d02ae24dd395440013df6c400c562ff4bbc4b16710ec  certbot_dns_linode-5.3.0.tar.gz
+c4110645d1a8c2d5a0b68b1b06473ef2ea70aa53da1002d0e8374c185f843564  certbot_dns_luadns-5.3.0.tar.gz
+bc97277ea35d8723701953917e9cf71c19cf63b68ef5bdc74c93bdae4c2b052f  certbot_dns_nsone-5.3.0.tar.gz
+f4b30ea9e94d663431a9522914892bd8694f44cfed8c50a8545b2677b976b47d  certbot_dns_ovh-5.3.0.tar.gz
+ee0b8edee900b87ad66378f00d50a524cc8059761e0c40cedc5db69557fe0d24  certbot_dns_rfc2136-5.3.0.tar.gz
+ca8de3b071b0a0a95a81696098104b29b1916e8b8b5202951c5ad9686fdfa42f  certbot_dns_route53-5.3.0.tar.gz
+2128635d4f7a720ee6f2a31f30c5f2810565d154483eb9b4ec710da721e48edd  certbot_dns_sakuracloud-5.3.0.tar.gz
+3d9bf295692142e6617294c577bc019e48c284aee900acf23e8e912ae34c7be4  certbot_nginx-5.3.0.tar.gz
+6b5214661803118d58d8fc0d59dd0c48b8b864456e9d90ba834f8eedf9dd67b6  certbot-5.3.0.tar.gz
diff --git a/packages/SHA256SUMS.asc b/packages/SHA256SUMS.asc
new file mode 100644
index 000000000..a07793d3c
--- /dev/null
+++ b/packages/SHA256SUMS.asc
@@ -0,0 +1,14 @@
+-----BEGIN PGP SIGNATURE-----
+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+=ZP0w
+-----END PGP SIGNATURE-----
diff --git a/packages/acme-5.3.0.tar.gz b/packages/acme-5.3.0.tar.gz
new file mode 100644
index 000000000..25c035d9b
Binary files /dev/null and b/packages/acme-5.3.0.tar.gz differ
diff --git a/packages/certbot-5.3.0.tar.gz b/packages/certbot-5.3.0.tar.gz
new file mode 100644
index 000000000..be13d19d7
Binary files /dev/null and b/packages/certbot-5.3.0.tar.gz differ
diff --git a/packages/certbot_apache-5.3.0.tar.gz b/packages/certbot_apache-5.3.0.tar.gz
new file mode 100644
index 000000000..27b9f036a
Binary files /dev/null and b/packages/certbot_apache-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_cloudflare-5.3.0.tar.gz b/packages/certbot_dns_cloudflare-5.3.0.tar.gz
new file mode 100644
index 000000000..c0fa1b5d2
Binary files /dev/null and b/packages/certbot_dns_cloudflare-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_digitalocean-5.3.0.tar.gz b/packages/certbot_dns_digitalocean-5.3.0.tar.gz
new file mode 100644
index 000000000..6a103f667
Binary files /dev/null and b/packages/certbot_dns_digitalocean-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_dnsimple-5.3.0.tar.gz b/packages/certbot_dns_dnsimple-5.3.0.tar.gz
new file mode 100644
index 000000000..0e3e9522e
Binary files /dev/null and b/packages/certbot_dns_dnsimple-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_dnsmadeeasy-5.3.0.tar.gz b/packages/certbot_dns_dnsmadeeasy-5.3.0.tar.gz
new file mode 100644
index 000000000..f3a7b0369
Binary files /dev/null and b/packages/certbot_dns_dnsmadeeasy-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_gehirn-5.3.0.tar.gz b/packages/certbot_dns_gehirn-5.3.0.tar.gz
new file mode 100644
index 000000000..ec0e6b2f8
Binary files /dev/null and b/packages/certbot_dns_gehirn-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_google-5.3.0.tar.gz b/packages/certbot_dns_google-5.3.0.tar.gz
new file mode 100644
index 000000000..ced39eb4e
Binary files /dev/null and b/packages/certbot_dns_google-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_linode-5.3.0.tar.gz b/packages/certbot_dns_linode-5.3.0.tar.gz
new file mode 100644
index 000000000..92bd726f6
Binary files /dev/null and b/packages/certbot_dns_linode-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_luadns-5.3.0.tar.gz b/packages/certbot_dns_luadns-5.3.0.tar.gz
new file mode 100644
index 000000000..b9010fc76
Binary files /dev/null and b/packages/certbot_dns_luadns-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_nsone-5.3.0.tar.gz b/packages/certbot_dns_nsone-5.3.0.tar.gz
new file mode 100644
index 000000000..57cd94894
Binary files /dev/null and b/packages/certbot_dns_nsone-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_ovh-5.3.0.tar.gz b/packages/certbot_dns_ovh-5.3.0.tar.gz
new file mode 100644
index 000000000..dedfd352e
Binary files /dev/null and b/packages/certbot_dns_ovh-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_rfc2136-5.3.0.tar.gz b/packages/certbot_dns_rfc2136-5.3.0.tar.gz
new file mode 100644
index 000000000..20a0bafdf
Binary files /dev/null and b/packages/certbot_dns_rfc2136-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_route53-5.3.0.tar.gz b/packages/certbot_dns_route53-5.3.0.tar.gz
new file mode 100644
index 000000000..fd66340f9
Binary files /dev/null and b/packages/certbot_dns_route53-5.3.0.tar.gz differ
diff --git a/packages/certbot_dns_sakuracloud-5.3.0.tar.gz b/packages/certbot_dns_sakuracloud-5.3.0.tar.gz
new file mode 100644
index 000000000..65ae2df82
Binary files /dev/null and b/packages/certbot_dns_sakuracloud-5.3.0.tar.gz differ
diff --git a/packages/certbot_nginx-5.3.0.tar.gz b/packages/certbot_nginx-5.3.0.tar.gz
new file mode 100644
index 000000000..b6d1f2daf
Binary files /dev/null and b/packages/certbot_nginx-5.3.0.tar.gz differ