Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Suppose I create sub domain per user, something like which is secured under a wildcard ssl certificate. If I allow users to have their own custom url via a CNAME would the new url still be covered under the certificate or would I need a separate certificate per custom url?

share|improve this question
up vote 8 down vote accepted

No, I fear the previous answer is wrong. If you stick to giving users subdomains then your wildcard certificate will work, but if you allow users to map custom domains to their subdomains with CNAMEs, then they will need separate certificates for each custom domain, and separate public IP addresses as well.

share|improve this answer
Chris has edited his answer since I answered. – Mike Scott Jan 28 '11 at 20:29
Chris has clarified his answer because the questions wasn't clear and he assumed whatWhat meant subdomains of the domain he owns and has a wildcard cert for, but understands where that isn't explicitly stated and could be talking about something else. =) – Chris S Jan 28 '11 at 20:32

Yes, CNAMEs work if the CNAME is within the wildcard's match pattern.

If your cert is for *, no you can't use a CNAME like

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.