What's the EU alternative to Let's Encrypt? I see that Actalis is in the default trust store and has an free ACME service, except that it will only do single domain certs so it won't work for my nginx proxy that handles all the TLS.
Turns out that the Actalis single domain certs *can* work for a single nginx that terminates all the TLS connections, it just requires a for-loop and configuration changes so that every server block has its own ssl_certificate and ssl_certificate_key directive. Not a drop-in replacement for Let's Encrypt, but not that much extra work.
and we are now running the v.st sites on the Italian Actalis CA instead of Let's Encrypt!
@th
How are they versus Let's Encrypt as far as the actual management of the CA goes? I know it's all pretty heavily specified with a reasonable baseline these days, but I've had the impression that LE have been out in front at least a little there?