2 ms·
> DNS-01 + a wildcard SSL cert takes care of that unless you need third level domain names. This will allow internal-only services to get LE/ACME certs, but th
by throw0101b 3y ago
> DNS-01 + a wildcard SSL cert takes care of that unless you need third level domain names.
This will allow internal-only services to get LE/ACME certs, but those cert will still show up in the CT logs and be visible to the entire world.
Some folks do not want that visibility, and that's what an internal-only CA gets you.
- Kluggy 3y agoA wildcard cert is a single cert that is valid for any subdomain. The specific ones you use are not exposed to the CT, just the fact that there is a *.example.com was minted