Wildcard SSL Certificates for Yealink auto provisioning

[xenexsystems]

Hi All

Can anyone recommend a wildcard certificate that is currently trusted by Yealink handsets? We're trying to renew and the current firmware don't trust our old RapidSSL cert.

We're using a custom domain name.

We've bought and tried a fair few and they don't work without manually installing the intermediate.

Lets Encrypt doesn't work anymore so imagine this will be big problem for many people soon.

We're testing on a Yealink T54W on 3CX recommended firmware 96.86.0.63.

Anyone with info on a working cert would be appreciated!

 

[Alphabetic]

I imagine any of these

https://support.yealink.com/en/portal/knowledge/show?id=bab64fcca62fd012b682c533

 

[xenexsystems]

We tried those of course. We found that:
1) Can't buy half of them on the list
2) Most of the certs you can buy, the intermediate certificate isn't trusted by the phone. You can install it but defeats purpose of auto prov
2) A large number of SSL companies have been acquired by Digicert

For anyone else who has this problem, let me save you a days work:
We ended up paying $$ for a Digicert wildcard which works after testing a heap on the Yealink list.

We also found the Sectigo cert seems to work but not on the older G model phones without a firmware update.