> even for certs for private use. This has been a concern of mine. Paired with incompatibility in clients[1] it's easy to mess up. I'm building a service[2] a

> even for certs for private use. This has been a concern of mine. Paired with incompatibility in clients[1] it's easy to mess up. I'm building a service[2] and related tooling that makes it easier to use public CAs for private use. I'm in early stages, but feedback has been good so far. [1] https://alexsci.com/blog/name-non-constraint/ https://alexsci.com/blog/name-non-constraint/ [2] https://alexsci.com/blog/improve-https-1/ https://alexsci.com/blog/improve-https-1/