This message was deleted.

I miss those replies as they were not in the thread. Using external cert providers won't be possible as our internal FQDN is private and correct me if I am wrong here but this FQDN would need to be public for ACME to work, no? If it's technically possible we could also use letsencrypt or other. Noted for MS certificates not supporting ACME, I could automate it (openssl + PoSh) but it won't be really secure especially for protecting the private key even if with effort I could generate a random password to protect it ... I wish you a successful business on this as when Google bring this down to 90 days, I'm sure you'll get a good few new clients! In my case I don't have the luxury to choose who I am working with, public service.