Let's Encrypt: an automated certificate authority to encrypt the entire web
It's still a pain in the ass to manage wildcard certificates with letsencrypt.<p>Especially when your DNS registrar does not support DNS changes via API.<p>And even <i>if</i> the registrar supports it, you have to build and maintain the code that talks to the API. Yuck.<p>I wonder why they don't allow whover controls the domain name to use the domain/.well-known/acme-challenge to create wildcard certs that are valid for all subdomains of that domain.