Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have to enable ssl for the domain like www.domain.com and subdomain like www.subdomain.domain.com , should i get a wildcard ssl or ssl with 5 different sites?

share|improve this question
    
Keep in mind that wildcards typically do not work for multiple levels. so *.domain.com will match www.domain.com and foo.domain.com, but fail for www.foo.domain.com. –  Zoredache Feb 15 '11 at 22:01
add comment

3 Answers

This depends on a number of factors:

  • Will you be adding new subdomains?
    If so a wildcard cert may be for you...

  • Is it important that each site be secured separately?
    (e.g. compromising the cert for one site shouldn't compromise all of them)
    If so you don't want a wildcard certificate - you want a separate cert for each subdomain

  • Do you need an Extended Validation (EV) Certificate?
    I don't believe any SSL providers offer wildcard EV certs...

share|improve this answer
1  
You can't get a EV wildcard.... :) –  Jacob Feb 15 '11 at 21:48
    
@Jacob that's what I thought - something about it being verboten because of the validation process. –  voretaq7 Feb 15 '11 at 21:49
    
Thanks i guess i don't need wildcard certificate . I could get with a ssl for 5 sites. –  Aditya Shukla Feb 15 '11 at 21:49
    
@Aditya wildcard or SubjectAlternativeNames both have the same level of security (see my clarification above). If you're going with 5-names-on-one-cert you may as well go wildcard if you don't need EV. As others mentioned it can make management easier... –  voretaq7 Feb 15 '11 at 21:53
    
I suggest just going wildcard as it will cost 5K plus a year for 5 EV certs. –  Jacob Feb 15 '11 at 21:56
add comment

Wildcard usually costs more, however can be deployed to multiple servers thus eliminating certification renew process for every certificate used. By eliminating I mean, removing the entire process of renewing certificate at the CA. I'm personally vote for the wildcard.

share|improve this answer
add comment

Get the Wildcard SSL certificate. It is easier to manage and renew.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.