4 ms·
> That said, I'd still opt for a wildcard certificate for anything enterprisey. Let's encrypt can be used to generate a certificate for every subdomain, though
by dineshp2 11y ago
> That said, I'd still opt for a wildcard certificate for anything enterprisey.
Let's encrypt can be used to generate a certificate for every subdomain, though it's a little more work compared to just using a wild card certificate.
- Jaruzel 11y agoIf you are running Windows Server as your Webserver (many Enterprise places do), and the version of IIS is <7.5 (i.e. Server 2008, still under extended support until 2020), you can't assign more than one Cert to the same IP which sucks. SNI is only available from Windows Server 2012 onwards, and that doesn't work with Windows XP as the client (Still approx 10% of users globally).
- wtetzner 11y agoRight, but at least you can up to 100 subdomains as SANs on the same certificate.
- Jaruzel 11y agoAgreed, and before LetsEncrypt that was insanely expensive for absolutely no reason whatsoever. I sincerely hope that paying through the nose for Certs becomes something only Enterprise Orgs do, just for the backend support service.