What's the EU alternative to Let's Encrypt? I see that Actalis is in the default trust store and has an free ACME service, except that it will only do single domain certs so it won't work for my nginx proxy that handles all the TLS.
Turns out that the Actalis single domain certs *can* work for a single nginx that terminates all the TLS connections, it just requires a for-loop and configuration changes so that every server block has its own ssl_certificate and ssl_certificate_key directive. Not a drop-in replacement for Let's Encrypt, but not that much extra work.
@th good to know!