Let's Encrypt certificate instead of COMODO CA with random subjectAltNames

[Majkl578]

Current certificate is issued by COMODO CA (through Cloudflare) and has tens of random unrelated alternative names.

It's sad we are using such thing when Let's Encrypt exists. :(

$ openssl s_client -connect www.doctrine-project.org:443 2>&1 | openssl x509 -noout -text | grep -o DNS: | wc -l
65

https://www.ssllabs.com/ssltest/analyze.html?d=www.doctrine%2dproject.org&s=2400%3acb00%3a2048%3a1%3a0%3a0%3a6812%3a292d&latest

[Majkl578]

Any update on this one? :/ I'm not happy seeing COMODO certificate with 40 random alternative names on a website of an OSS project. Let's Encrypt is absolutely free, it's the best suited CA for OSS project.

[jwage]

I'm all for it. Let me know how you want to set it up.

[mpdude]

It’s still using a Cloudflare cert, but that no longer contains that many unrelated names (only one for a Cloudflare host which is probably there for reasons).