creating letsencrypt records for email subdomains like mail, imap, etc.?

Discussion in 'Installation/Configuration' started by JustAnotherUser, Dec 30, 2025.

  1. JustAnotherUser

    JustAnotherUser New Member

    Hello.
    Is it possible to have the system fetch ssl certs from letsencrypt for email domains? for example i'd like mail.domain.com imap.domain.com, etc.
    Each time i add a domain it should add these certs.

    Anyone know what i might be missing? I'm running the latest ispconfig 3.3 on debian 12
     
    JustAnotherUser, Dec 30, 2025
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    No, not automatically.
     
    till, Dec 30, 2025
    #2
  3. JustAnotherUser

    JustAnotherUser New Member

    So how is this done in larger environments with different clients and domains? Does everyone just use the system servers?

    Thanks.
     
    JustAnotherUser, Dec 30, 2025
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Larger environments use a single mail server name that all clients use to connect to the server. So the client does not use imap.his-own-domain.tld but instead imap.your-hosting-company.tld. Using different client domains makes no sense on a large scale setups as postfix would have to load hundreds or even thousands of different certificates and you would have constant trouble with cert renewals and even reach limits from LE.
     
    till, Dec 30, 2025
    #4
  5. JustAnotherUser

    JustAnotherUser New Member

    and to do the le cert for the main name you add subdomains in the main server cert for things like imap, mail, etc?
     
    JustAnotherUser, Dec 30, 2025
    #5

Share This Page