On Debian, dehydrated has BASEDIR set to /var/lib/dehydrated (https://salsa.debian.org/letsencrypt-team/dehydrated/blob/debian/master/debian/config.sh) and CERTDIR defaults to "${BASEDIR}/certs".
While in there, also allow accessing the DER encoded OCSP stapling file.