3 ms·
You can do two other things, besides using a wildcard domain as mentioned in a sibling comment. 1) Use public DNS to validate instead of HTTP. I do this for in
by nulbyte 5y ago
You can do two other things, besides using a wildcard domain as mentioned in a sibling comment.
1) Use public DNS to validate instead of HTTP. I do this for internal-only webservers. TXT records are updated during renewal using Hurricane Electric's DNS service at dns.he.net.
2) Run your own CA. This used to be a huge pain, until I found gnoMint. I use this to generate certificates for OpenVPN. If necessary, installing a root certificate is not difficult on most systems. You can set it to expire in, say, 10 years, so you won't need to update it so often.