3 ms·
Many of the cloud providers give free certs via acme. https://cloud.google.com/certificate-manager/docs/public-ca-tutorial https://cloud.google.com/certificate
by kyrra 1y ago
Many of the cloud providers give free certs via acme.
https://cloud.google.com/certificate-manager/docs/public-ca-tutorial https://cloud.google.com/certificate-manager/docs/public-ca-... (EDIT: Google is their own CA, with https://pki.goog/ https://pki.goog/ )
The browsers and security people have been pushing towards shorter certs, not longer ones. Knowing how to rotate a cert every year, if not shorter, helps when your certificate or any of your parent certs are compromised and require an emergency rotation.
- CGamesPlay 1y agoDoes AWS provide something similar? I found ACM "exportable certificates", but that involves AWS managing your private key.
- schoen 1y agoLast I knew, AWS would issue a free certificate to people using certain AWS services, but, as you say, only if Amazon is managing the private key. You can also use ACM APIs to import keys and certificates from other CAs.