Banish OEM self-signed certs forever and roll your own private LetsEncrypt

Toss certbot or acme.sh onto some servers and baby, you got a stew going!

https://arstechnica.com/information-technology/2024/03/banish-oem-self-signed-certs-forever-and-roll-your-own-private-letsencrypt/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social