Let's Encrypt: an automated certificate authority to encrypt the entire web
It's still a pain in the ass to manage wildcard certificates with letsencrypt.Especially when your DNS registrar does not support DNS changes via API.And even if the registrar supports it, you have to build and maintain the code that talks to the API. Yuck.I wonder why they don't allow whover controls the domain name to use the domain/.well-known/acme-challenge to create wildcard certs that are valid for all subdomains of that domain.