Wildcard domain name in Let's Encrypt certificates (7.6.1)

Let's Encrypt is a non-profit certificate authority managed by the Internet Security Research Group (ISRG) that offers X.509 certificates for Transport Layer Security (TLS) encryption at no cost. A Let's Encrypt certificate can serve as a substitute for a traditional CA certificate, allowing FortiWeb to authenticate itself to clients in HTTPS communication. When creating a Let's Encrypt certificate, specify your application's domain names, and FortiWeb will obtain a CA certificate from Let's Encrypt on behalf of your application.

Starting from version 7.6.1, FortiWeb supports wildcard Let's Encrypt certificates, enabling you to match multiple domain names with a single certificate.

It is particularly useful in scenarios where you need to secure multiple subdomains under a single primary domain. With a wildcard certificate, you can manage and secure all these domains with a single certificate, simplifying SSL/TLS management and reducing the need for multiple individual certificates. For instance, as shown in the diagram below, you can use let's encrypt certificate with wildcard "www.*.domain.com" to match all subdomains such as "www.a.domain.com", "www.b.domain.com", etc.

It's configured in Server Objects > Certificates > Letsencrypt.

For more information, see Let's Encrypt certificates.