Question

You manage a web app named contoso-app running on an App Service plan (Standard S1 tier). The app already has the custom domain www.contoso.com verified and bound to it. Your security team requires HTTPS with a valid TLS certificate for the custom domain, and they want to avoid any recurring certificate purchase or manual renewal effort. What should you do?

Accepted Answer

Create an App Service managed certificate for www.contoso.com and add a TLS/SSL binding using it.

Answer

Upload a self-signed certificate for www.contoso.com and create a TLS/SSL binding using it.

Answer

Purchase an App Service certificate and manually renew it each year before it expires.

Answer

Scale the App Service plan up to Premium v3 to enable the free wildcard certificate feature.