<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Sep 12, 2017, at 2:27 PM, Craig MacGregor <<a href="mailto:cmacgreg@gmail.com" class="">cmacgreg@gmail.com</a>> wrote:</div><div class=""><div dir="ltr" class=""><div class="gmail_extra"><div class="gmail_quote"><div class=""><br class=""></div><div class="">Let's Encrypt has some limits that can get annoying for this specific use case; you can register effectively unlimited domains, but are limited to 20 subdomains per domain per week. To make it even more complicated, there is no limit for renewals, but renewals also count against those 20 subdomains per week, so if you happen to have a few hundred internal subdomains, you will still run into these limits 90 days down the line, when the certs renew (I just had this issue and was able to resolve via their rate adjustment form and community forum; very responsive and helpful for a free/donation-based service).</div></div></div></div></div></blockquote><div><br class=""></div><div>These limits can basically rule them out for wildcards. You can work around the limit, but it’s kind of a pain I suspect.</div><div><br class=""></div><div>Here’s their docs on this:</div><div><br class=""></div><div><a href="https://letsencrypt.org/docs/rate-limits/" class="">https://letsencrypt.org/docs/rate-limits/</a></div><div><br class=""></div><div>Also, for a script to handle this, I like dehydrated:</div><div><br class=""></div><div><a href="https://github.com/lukas2511/dehydrated" class="">https://github.com/lukas2511/dehydrated</a> - also in FreeBSD ports collection</div><div><br class=""></div><div>Charles</div><div><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_extra"><br class=""></div></div>
_______________________________________________<br class="">talk mailing list<br class=""><a href="mailto:talk@lists.nycbug.org" class="">talk@lists.nycbug.org</a><br class="">http://lists.nycbug.org/mailman/listinfo/talk</div></blockquote></div><br class=""></body></html>