I have a bunch of sites served through nginx with SSL with self-signed certificates, each of which is on a subdomain, e.g.:
https://app1.example.comhttps://app2.example.com
My user base is small and tightly controlled so I personally install the certificates for each user. The problem is that the number of apps is increasing to the point that it would be far easier to be able have a single *.example.com
which I circulate. However, self-signed wildcard certificates don't work in most browsers. How would I get around this? I'm guessing that one option would be to somehow provide a list of subdomains for the certificate, but I have no idea how I would go about doing that. My other thought is that perhaps I could create a self-signed root certificate from which each subdomain inherits?