Multiple subdomains with lets encrypt

ssl-certificate lets-encrypt
Breith picture Breith · Sep 5, 2016 · Viewed 25.7k times · Source

I have an attractive message indicating me that it is unfortunately not possible to generate a certificate for multiple subdomains:

Wildcard domains are not supported: *.mynewsiteweb.com

On the other hand it would be possible to generate it one by one for each subdomain.

Is there a better solution? Thank you :)



Edit

Now Certbot supports the Wildcard since 0.22.0 version (2018-03-07)

Links

Thanks

Answer

Jay Riley picture Jay Riley · Apr 6, 2018

Prior to support for wildcards I found it necessary to explicitly list each domain on a certificate in the form

… -d example.com -d www.example.com -d blog.example.com -d www.blog.example.com …

(which due to complexities in the odd mix of redirected domains I'm using worked best with the --webroot authentication).

Thanks to Trojan's explanation and documentation here:

https://certbot.eff.org/docs/install.html?highlight=wildcard

I was able to generate wildcard certs that are live now. Unfortunately there is not a plugin for EasyDNS.com yet, so I had to perform manual validation (Where Trojans example saved the day). With this approach I was able to generate a certificate in the form 

… -d *.example.com -d example.com -d *.blog.example.com …

Since (for example's sake) blog.example.com was already covered by the *.example.com wildcard, I only had to add the wildcard for *.blog.example.com. In fact certbot would not allow redundancy (complained if I tried to include both *.example.com and www.example.com).

Currently available plug-ins are listed here:

https://certbot.eff.org/docs/using.html#dns-plugins

As of this writing they include these DNS providers:

  • certbot-dns-cloudflare
  • certbot-dns-cloudxns
  • certbot-dns-digitalocean
  • certbot-dns-dnsimple
  • certbot-dns-dnsmadeeasy
  • certbot-dns-google
  • certbot-dns-luadns
  • certbot-dns-nsone
  • certbot-dns-rfc2136
  • certbot-dns-route53

Perhaps I'll take a peek over the weekend and see how hard it is to write a plug-in for my own DNS provider.

Related questions

Letsencrypt add domain to existing certificate

I am just simply trying to add the domain test.example.com to the certificate that already exists for example.com. How do I add a domain to my existing certificate and replace the old certificate? I have tried these …

Read More
How do I use let’s encrypt with gitlab?

I started to look in to ssl certificates when I stumbled upon let's encrypt, and I wanted to use it with gitlab, however being that it is running on a raspberry pi 2 and its running quite perfectly now (so I …

Read More
Generate CRT & KEY ssl files from Let's Encrypt from scratch

I'd like to generate a CRT/KEY couple SSL files with Let's Encrypt (with manual challenge). I'm trying something like this : certbot certonly --manual -d mydomain.com But I only get these files in my /etc/letsencrypt/live/mydomain.com …

Read More