SSL cert for Google Cloud Platform with multiple subdomains

[alexmattos]

This is a query - we are not using Let’s Encrypt yet but would like to.

We run a distributed web application (with multiple sub-domains for each customer - xyz.i6clouds.com) on GCP using their load balancer where we can put a SSL cert. This is great for our current wildcard cert since we can put this cert at the load balancer level and then each of the sub-domains can be covered by the wildcard no matter which web server handles the query.

Since Lets Encrypt doesn’t do wildcards how would we handle this scenario?

Please fill out the fields below so we can help you better.

My domain is: i6.i6clouds.com

I ran this command: N/A

It produced this output: N/A

My operating system is (include version): Ubuntu

My web server is (include version): Nginx

My hosting provider, if applicable, is: Google Cloud Platform

I can login to a root shell on my machine (yes or no, or I don’t know): yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel): no

[serverco]

My initial reaction is it comes down to numbers …

If you have less than 100 different subdomains, then they can all go on 1 certificate and shouldn’t be too much of an issue.

If you have more than (from memory ) 300 subdomains, then Let’s Encrypt has potential exemptions from the rate limits which could allow you to obtain multiple certs without hitting the limits.

Between 100 and 300 it’s more difficult (imho) but still possible