<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>I have moved from a very old version to 5211R. I used CMU and everything went fine. The configuration I migrated from the old server is the same for most of the domains I host (see example below). I have also installed roundcube. The majority of these vsites are handling both web and email. I do have a few sites that we are hosting mail only and the host name is mail. In those cases I added an index.html file that does a redirect to mail.domain.com/roundcube, obviously those work fine.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Host name www<o:p></o:p></p><p class=MsoNormal>Domain name domain.com<o:p></o:p></p><p class=MsoNormal>Web alias domain.com<o:p></o:p></p><p class=MsoNormal>Email alias domain.com, mail.domain.com<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The DNS entry has A records for www, ftp and mail pointing to the IP address assigned to the vsite. Each vsite has it’s own IP address. Servers are running Postfix.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Initially I used the GUI to grab a Let’s Encrypt cert and it works great for www.domain.com, but it didn’t encrypt mail.domain.com<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have tried a few configurations such as removing the Email aliases and adding them as web aliases, but I seem to have issues with mail delivery in that config.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I also tried to add a sub domain with a host name of mail and selected /home/.sites/sitex/wwwroot/web then entered roundcube as the web directory. I generated a new Let’s Encrypt cert and selected ssl for subdomains and added the mail.domain.com subdomain to the cert.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I either have issues with mail flow or mail.domain.com is not encrypted with the cert. My goal is to have the one cert cover both www.domain.com for web browsing and mail.domain.com for mail clients and roundcube. If this is possible, what is the best practice for those domains doing both web and mail?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><b>Roy Fritz<o:p></o:p></b></p><p class=MsoNormal><b>Western PA Internet Access<o:p></o:p></b></p><p class=MsoNormal>326 Vanyo Road<o:p></o:p></p><p class=MsoNormal>Berlin, PA 15530<o:p></o:p></p><p class=MsoNormal>(814) 267-6311 Fax: (814) 267-4635<o:p></o:p></p><p class=MsoNormal><a href="http://www.wpia.net/">www.wpia.net</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>