Koozali.org: home of the SME Server

Letsencrypt - Prerequisites

Offline gieres

  • *
  • 213
  • +0/-0
Letsencrypt - Prerequisites
« on: May 20, 2018, 10:29:15 PM »
Hi,
Letsencrypt will issue certificates that include multiple hostnames (for example, www.example.com, example.com, and mail.example.com), all of which would be part of the request. All of the conditions above must be true for all of the hostnames you want to include in the certificate.

Does it mean that www.example.com and mail.example.com MUST be have the same IP address ? (must be on the same server ?)
Thanks in advance.

Offline Jean-Philippe Pialasse

  • *
  • 2,764
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Letsencrypt - Prerequisites
« Reply #1 on: May 20, 2018, 10:57:42 PM »
Hi,
Letsencrypt will issue certificates that include multiple hostnames (for example, www.example.com, example.com, and mail.example.com), all of which would be part of the request. All of the conditions above must be true for all of the hostnames you want to include in the certificate.

Does it mean that www.example.com and mail.example.com MUST be have the same IP address ? (must be on the same server ?)
Thanks in advance.

no. Two examples :
1- you use DNS validation
2- mail.example.com is on your lan  but internet dns point to www.example.com which is a gateway. You can then deploy your cert on your internal server.

I guess that if you use round-robin dns you might need to go for dns validation too, as you never know on which server the test will end up.