LetsEncrypt.org is a wonderfully progressive initiative… free certs for all, to promote better internet security, nice!
this windows tool made quick work of plugging it into IIS vs the more unix’y stuff they suggest on their home page
literally just seconds to launch the win tool and hitting a key to select which IIS site you want the cert for… none of the ol’ CSR hassle, yay!
- your web server has to be reachable on the public internet at the domain url (port 80) you wish to gen the cert for
- the win tool will be most automatic when you plug your domain into the host-header (port 80)
Note: The LetEncrypt certs come set to expire in 90 days – BUT, the windows tool schedules a recurring task to reach out and automatically renew the certs before that expiration. Pretty slick… will have watch if that actually works come time.