3 ms·
Maybe that's restriction for LetsEncrypt (I haven't used it myself) but certificates aren't restricted to 2nd level.
by takeda 7y ago
Maybe that's restriction for LetsEncrypt (I haven't used it myself) but certificates aren't restricted to 2nd level.
- LeonM 7y agoNo, this is nothing specific for Lets Encrypt, this is how PKI works. A certificate is for a domain name, not an IP address. Anyone can point a (sub)domain that they own to an IP address that they do not own. And then get a valid certificate for that domain. I can point an A record to [your-ip].[my-domain] and I will be able to get a valid cert for that address. However, the address in your address bar will still point to [my-domain], not yours.
- shawnz 7y agoYou can get a certificate for an IP address, but LetsEncrypt doesn't support it. So this might be somewhat specific for LetsEncrypt.