up vote 1 down vote favorite
share [g+] share [fb]

I have a wildcard SSL certificate setup on *.domain.com and its working fine. I now want to add a single ssl certificate to domain.com.

Is this likely to cause me problems? I assume not, but I thought it would be good to check that someone else has done it.

link|improve this question
38% accept rate
feedback

2 Answers

up vote 1 down vote

You need a different IP for each different SSL cert you use. So you'll need two IPs.

It's not clear why you want to use another SSL cert, is it an EV cert?

link|improve this answer
Speaking for Windows IIS 6 and beyond, there is a feature called SSL Host Headers that allows for this very scenario. (microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/…) – Dscoduc Jun 2 '10 at 3:18
Dscouduc: SSL Host Headers is a misnomer at best; it allows you to use one cert for multiple sites (the poster asked about multiple certs for one site); but the cert has to be a wildcard cert that matches all the sites covered. – Chris S♦ Jun 2 '10 at 3:34
Not sure why you think it's a misnomer... many people choose to do this for their environment to avoid having to use multiple IP addresses for their websites. – Dscoduc Jun 2 '10 at 6:14
It's a misnomer because it's stetting up the SSL tunnel without any knowledge of the Host Header; after the tunnel is successfully setup, it uses standard Host Headers to determine the site. – Chris S♦ Jun 2 '10 at 12:22
Perhaps. But what is happening is most important. The SSL connection can take place without SSL warnings and the IIS Server can redirect the client to the appropriate web site based on the "host headers"... Sounds pretty clear and simple to me. If you want to get hung up on the title that's fine, but you can't argue with the result... Cheers. – Dscoduc Jun 2 '10 at 16:07
show 1 more comment
feedback
up vote 1 down vote

There shouldn't be a problem mixing the wildcard and specific certificates. Not sure why you would need to do this as the wildcard certificate should be able to handle all domain.com requests. You should also be able to bind the same wildcard certificate to multiple websites, meaning you don't need a unique certificate for each website.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.