Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have to enable ssl for the domain like and subdomain like , should i get a wildcard ssl or ssl with 5 different sites?

share|improve this question
Keep in mind that wildcards typically do not work for multiple levels. so * will match and, but fail for – Zoredache Feb 15 '11 at 22:01

This depends on a number of factors:

  • Will you be adding new subdomains?
    If so a wildcard cert may be for you...

  • Is it important that each site be secured separately?
    (e.g. compromising the cert for one site shouldn't compromise all of them)
    If so you don't want a wildcard certificate - you want a separate cert for each subdomain

  • Do you need an Extended Validation (EV) Certificate?
    I don't believe any SSL providers offer wildcard EV certs...

share|improve this answer
You can't get a EV wildcard.... :) – Jacob Feb 15 '11 at 21:48
@Jacob that's what I thought - something about it being verboten because of the validation process. – voretaq7 Feb 15 '11 at 21:49
Thanks i guess i don't need wildcard certificate . I could get with a ssl for 5 sites. – Aditya Shukla Feb 15 '11 at 21:49
@Aditya wildcard or SubjectAlternativeNames both have the same level of security (see my clarification above). If you're going with 5-names-on-one-cert you may as well go wildcard if you don't need EV. As others mentioned it can make management easier... – voretaq7 Feb 15 '11 at 21:53
I suggest just going wildcard as it will cost 5K plus a year for 5 EV certs. – Jacob Feb 15 '11 at 21:56

Wildcard usually costs more, however can be deployed to multiple servers thus eliminating certification renew process for every certificate used. By eliminating I mean, removing the entire process of renewing certificate at the CA. I'm personally vote for the wildcard.

share|improve this answer

Get the Wildcard SSL certificate. It is easier to manage and renew.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.