I’ve proposed using Let’s Encrypt but my coworkers believe there would be a perception issue with us using a “free” TLS certificate provider. I work for a popular internet search engine so it’s a reasonable worry.

It just seems like LE has the most efficient automatic renewal setup, though I haven’t looked in detail at other providers.

I’m that poor bastard engineer at my company. This likely will be the push we need to prioritize automation. Dealing with manual renewals with Digicert has been a pain in the ass. If anyone has experience with their automated option I’d love to hear it.