[tatersolid]

Let’s Encrypt makes this trivial and automatic if foobar.example.com has been CNAMEed to the tracking provider.