this post was submitted on 14 Apr 2026
10 points (91.7% liked)
Sysadmin
13973 readers
1 users here now
A community dedicated to the profession of IT Systems Administration
No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Well the really hard thing about SSL is sni maps, at least when working the first time with it and trying to debug it (especially with Thunderbird desktop which still wrongfully reports an invalid certificate 50% of the time. Click on refresh and it suddenly says it's okie-dokie)
Thankfully we only give two possible endpoints on two different addresses for all our domains .... this is good to know because I was thinking about using SANs as well. Thanks for the warning!