up vote 2 down vote favorite
1
share [g+] share [fb]

Is there a registar that offers SSL certificates for:

..domain.com

or

something_fixed.*.domain.com?

--

M.

link|improve this question
5  
Wouldn't *.example.com cover *.*.*.*.*.*...*.example.com? – ceejayoz Apr 11 '10 at 21:15
feedback

3 Answers

up vote 5 down vote

Actually, wildcards only work on the first level of a subdomain in most browsers. So a wildcard certificate for *.example.com wouldn't work on mail.test1.example.com.

Web browsers also don't know what to do with a certificate for somthing.*.example.com either. You best option is to get a SAN certificate that you can include the specific hostnames in no matter what level they are on.

link|improve this answer
"wildcards only work on the first level of a subdomain in most browsers". Do you have any references for this? I'm not disputing, just curious. – John Gardeniers Apr 12 '10 at 4:39
4  
Certainly. RFC2818 (ietf.org/rfc/rfc2818.txt) states: "If more than one identity of a given type is present in the certificate (e.g., more than one dNSName name, a match in any one of the set is considered acceptable.) Names may contain the wildcard character * which is considered to match any single domain name component or component fragment. E.g., .a.com matches foo.a.com but not bar.foo.a.com. f.com matches foo.com but not bar.com." – Robert Apr 13 '10 at 7:03
+1 Wildcard certs do indeed only work for the first level subdomain. – Tatas May 17 '10 at 15:28
feedback
up vote 0 down vote

As ceejayoz says - a standard wildcard certificate will do exactly what you desire.

I assume you're looking for that style of certificate because you want something cheaper? If so, then no can do, you have to purchase a wildcard.

link|improve this answer
feedback
up vote 0 down vote

In case it helps anyone, double wildcard certs don't actually work...

(from firefox) www.test.example.com uses an invalid security certificate.

The certificate is only valid for ..example.com

(Error code: ssl_error_bad_cert_domain)

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard