Update certificate-domain mapping logic to consider any infix year identifier in domain name:

• prevents main certificate conf.researchr.org hitting maximum of 100 domains; reduces renewal execution time
• e.g., icfp18.sigplan.org, 2018.splashcon.org, www.icse2018.org would all map to 2018.conf.researchr.org certificate
• reorganize URL mapping and certificate management on admin page
• add certbot command generator tool based on certificate name selection, useful for migrating to new certificate logic
• migration of certificates is done by requesting certificate renewal for existing certificates one-by-one, but with new list of domains, after which corresponding nginx’ server_name pattern should be updated to use “year infix” regex-match. Main cert conf.researchr.org is the only certificate for which domain names will get removed, and therefore should be done when all other certs+nginx server_name blocks are update.

Submitted by Elmer van Chastelet on 10 June 2024 at 23:23