Use custom cert for web GUI/directory

[tcatlas]

I'd like to use a custom certificate validated by a public authority so that my services automatically trust LabCA when trying to request a new certificate (instead of me needing to first import the LabCA cert). Is this possible? If so, how?

[maikxmh]

may this is possible when the root-CA of LabCA is signed by another authority. Then the servers will trust the certificate of LabCA
see -> Use a Sub-CA as "Root-CA"? #196

[tcatlas]

@maikxmh I'm fine with client devices needing to have my LabCA root cert, I just want the LabCA web GUI to use a public cert so the ACME client automatically trusts LabCA when reaching out to get a LabCA cert.

[hakwerk]

Perhaps you could add a reverse proxy web server in front of the LabCA web GUI that uses a public certificate?