What are the challenges of Let's Encrypt for corporate use?

Question

Digital certificates

What thread uses? On sites? On public and visited resources?
Are there any problems with data protection, risks? Confidentiality?
It is very convenient to generate a certificate, run everything on a new server.
Tell us about the experience?

Answer 1

We have a large corporate website, we thought about putting it there, but for some reason changed our minds, because we were afraid of compatibility problems in browsers. According to the idea, they should not have been, but nevertheless they decided to play it safe.
Maybe next year we will put a smaller site on the site, we will test it.

Answer 2

We tested compatibility with the most popular browsers, everything is fine and even with relatively new versions of cromium on android devices. I won't tell you the specific version, I don't remember. At this stage, it can be used. I have about 7 projects (3 relatively large) in production that use such certificates. The only question left is to update the certificate, I recently discovered that their team did not want to work through cron when everything is updated manually. Put a business card/blog on any site and test compatibility yourself.
Generation and update can be run from a non-privileged user, but you need the rights to execute some commands from sudo (for example, reload the web server), although I still don’t understand in standalone mode, reload doesn’t seem to start.

Answer 3

FVDS recently implemented such a certificate for all interested customers. So I think there will be no problems if hosting offers it out of the box.
PS Browser compatibility:
https://community.letsencrypt.org/t/which-browsers...

Answer 4

No problem, take it easy.
oni__ino , as well as the rest, for a painless update, I advise:
https://github.com/littleguga/letsencrypt-config
I collected the config and installation instructions in one place, added a little from myself. Such a thing is already spinning on 5 projects, there are no problems.
> Risks, problems, privacy
Same as when using any other certificate
> Installation on a new server
I made a preparation for myself above, now a new setup takes less than 5 minutes (most of the time is git clone and for now I will check that I have registered the domains correctly)

Answer 5

There are no problems. There are no problems with old browsers
either (we don’t consider IE on XP ) . Handshake Simulation" at the test. Everything is done in a matter of minutes, the update is hung up in cron and you can forget about everything (plus LE sends reminders about certificates that will soon go out).