Thanks for the info on the headers, I can't believe they've issued certs for over a million domains! Here's my notes on setting up LE on IIS if anyone one is i

Thanks for the info on the headers, I can't believe they've issued certs for over a million domains! Here's my notes on setting up LE on IIS if anyone one is interested, it's done by using Powershell/ Package manager. //1. Install (you will get some security prompts) Install-Module -Name ACMESharp Import-Module ACMESharp Initialize-ACMEVault New-ACMERegistration -Contacts mailto:somebody@example.org -AcceptTos //2. Request the challange, this is for a website currently running on IIS. 'WebSiteRef ' refers to the name of the site within IIS New-ACMEIdentifier -Dns demo.velox.io -Alias demo Complete-ACMEChallenge demo -ChallengeType http-01 -Handler iis -HandlerParameters @{ WebSiteRef = 'Demo' } Submit-ACMEChallenge demo -ChallengeType http-01 //3. Create & download the certificate New-ACMECertificate demo -Generate -Alias demoCert Submit-ACMECertificate demoCert Update-ACMECertificate demoCert Get-ACMECertificate demoCert -ExportPkcs12 "C:\Users\USER\desktop\demoCert.pfx" You can now install this on your server.