> Given that letsencrypt exists, I don't see why you wouldn't have a cert. That makes an enormous number of assumptions-- that you have a domain name, that you

> Given that letsencrypt exists, I don't see why you wouldn't have a cert. That makes an enormous number of assumptions-- that you have a domain name, that you accept inbound connections, and that "gee some server connected to my name and got me once" is a remotely acceptable criteria for identity in your application.