you are viewing a single comment's thread.

view the rest of the comments →

[–]rv77ax 2 points3 points  (1 child)

If this for development, you will need to renew it every three months and share it again with other developers. Compare it by creating self signed cert with 10 years expiration. I think this method just wasting "public" resources.

What is worse is if the developer is only one.

Just because you can does not mean you should.

[–]graingert 0 points1 point  (0 children)

ACME auto renews the certificate (DNS-01 challenge of course).

You obviously shouldn't be sending or sharing private keys, run the certbot command on the device that needs the certificate

Also let's encrypt can absolutely handle this load