Kule mihla ye -Let's Encrypt, iiwebhusayithi ezifihliweyo ngoku ziqhelekile. Nangona kunjalo, izatifikethi ze-wildcard okanye ezongeziweyo ezinokuqinisekiswa komnini okuthembekileyo nazo ziyafuneka rhoqo. I-DomainFactory inikezela ngezatifikethi ze-SSL ezingabizi kakhulu ezinokusetyenziswa nangaphandle. Ukuseta kwiseva yangoku ye-IIS kunokwenzeka ngaphandle kwe-CSR usebenzisa i-OpenSSL . Ngezantsi, ndiza kuchaza ngokufutshane amanyathelo afunekayo.
Kuqala ukhetha idilesi oyifunayo njengegama ledomeyini (ngokufaka "www" ukuze kamva https://tld.com kunye https://www.tld.com zibethelwe):
Emva kokukhetha isatifikethi osifunayo kunye nexesha lokusebenza, iDomainFactory inokuvelisa i-CSR yayo:
Inketho yesibini (layisha i-CSR yakho) ayimfuneko kwaye inzima (ngokungagqibekanga, i-IIS ayinikezeli ukhetho lokuvelisa izicelo ezifihliweyo ze-SHA256 ezifunwa yi-DomainFactory). Emva komyalelo ophumeleleyo, ukhuphela isatifikethi se-SSL, isitshixo sangasese kunye nesiqendu esiphakathi se-CA:
Ngoku udibanisa isitshixo kunye nesatifikethi kwifayile ye-pfx ngoncedo lwe-OpenSSL (enika iphasiwedi ekhuselekileyo):
openssl pkcs12 -export -out www.tld.com.pfx -inkey www.tld.com.key -in www.tld.com.crtOkokugqibela, isatifikethi esiphakathi siyalayishwa kwiseva yeWindows:
Oku kulandelwa kukungeniswa kwefayile ye-pfx eyenziwe kuMlawuli we-IIS (kwindawo yeSatifikethi seServer) ngokungenisa igama eligqithisiweyo elalabelwe oko:
Okokugqibela, uhlengahlengisa izibophelelo (ungeno olunye kunye nongeno olunye ngaphandle kwe-www):
Ukuba iserver iya kufikeleleka ngaphandle, uvula izibuko 443 kwi-router / firewall.