> Nowadays I wonder if Let's Encrypt would Just Work. But I have no > experience here. I have no experience with Let's Encrypt either, but it seems definitely possible to register only a subdomain [1].