Deploy a wildcard certificate
A wildcard certificate (*.example.com) secures all same-level subdomains.
Notes
- Wildcards can only be issued via DNS validation.
- *.example.com covers a.example.com and b.example.com, but not example.com itself.
Distribute
scp fullchain.crt key.pem web01:/etc/nginx/ssl/ ssh web01 nginx -s reload