:confetti_ball::tada: Wildcard Certificates Coming January 2018 - Let's Encrypt - Free SSL/TLS... Let’s Encrypt will begin issuing wildcard certificates in January of 2018.

Great news! Will we be able to “stack” wildcard domains? E.g. I have three domains ( example1.org , example1.com , example1.net ), will I be able to issue single certificate for *.example1.org, *.example1.com and *.example1.net?

The blog post says, “We will initially only support base domain validation via DNS for wildcard certificates” - does this mean that certificates for *.domain.com will be ok but *.api.domain.com will not? thanks

I think the intention of that sentence was that only the DNS challenge method will be allowed, not HTTP or TLS-SNI challenge methods. But I haven’t checked this with anyone responsible for the implementation.

This is great news for us. Will you allow longer than 90 days expiration for these? One of our use cases is on internal servers that can’t do the automated issuance (at least, I don’t think they can… it’s been a while since I’ve looked at the progress). To put a number on it, a 6-month expiration t…

[image] schoen: I think the intention of that sentence was that only the DNS challenge method will be allowed, not HTTP or TLS-SNI challenge methods. But I haven't checked this with anyone responsible for the implementation. This is the correct interpretation of the blog post :slight_smile:

[image] JamieE: This is great news for us. Will you allow longer than 90 days expiration for these? There's no plan to change certificate validity period at this point.

[image] JamieE: Will you allow longer than 90 days expiration for these? I rather see this reduced to 30 days than increased. that's the all idea behind automation

[image] JamieE: One of our use cases is on internal servers that can't do the automated issuance Have you looked into DNS01?

[image] BlnaryMlke: Have you looked into DNS01? Thanks for the tip. We're a Windows shop, so for any other n00bs like me reading this, I'm going to start with this blog post and see what I can set up on a development server. Also, it seems the proper search term on this is "DNS-01".

Wildcard Certificates Coming January 2018

Issuance Policy

cpu July 6, 2017, 5:06pm 8

This is the correct interpretation of the blog post

Topic		Replies	Views
How to issue wildcard certificate for a domain from letsencrypt Help	27	92196	September 20, 2018
Please support wildcard certificates Issuance Policy	66	84533	October 13, 2015
DNS-Label for wildcard-certificate-validation Issuance Policy	20	8511	January 22, 2018
How many wild card domains per certificate Issuance Tech	17	5536	April 27, 2018
Wildcard certicate poorly supported Feature Requests	27	1612	January 27, 2023

Wildcard Certificates Coming January 2018

Related topics