up vote 1 down vote favorite
share [g+] share [fb]

I have to enable ssl for the domain like www.domain.com and subdomain like www.subdomain.domain.com , should i get a wildcard ssl or ssl with 5 different sites?

link|improve this question
38% accept rate
Keep in mind that wildcards typically do not work for multiple levels. so *.domain.com will match www.domain.com and foo.domain.com, but fail for www.foo.domain.com. – Zoredache Feb 15 '11 at 22:01
feedback

3 Answers

up vote 1 down vote

This depends on a number of factors:

  • Will you be adding new subdomains?
    If so a wildcard cert may be for you...

  • Is it important that each site be secured separately?
    (e.g. compromising the cert for one site shouldn't compromise all of them)
    If so you don't want a wildcard certificate - you want a separate cert for each subdomain

  • Do you need an Extended Validation (EV) Certificate?
    I don't believe any SSL providers offer wildcard EV certs...

link|improve this answer
1  
You can't get a EV wildcard.... :) – Jacob Feb 15 '11 at 21:48
@Jacob that's what I thought - something about it being verboten because of the validation process. – voretaq7♦ Feb 15 '11 at 21:49
Thanks i guess i don't need wildcard certificate . I could get with a ssl for 5 sites. – Aditya Shukla Feb 15 '11 at 21:49
@Aditya wildcard or SubjectAlternativeNames both have the same level of security (see my clarification above). If you're going with 5-names-on-one-cert you may as well go wildcard if you don't need EV. As others mentioned it can make management easier... – voretaq7♦ Feb 15 '11 at 21:53
I suggest just going wildcard as it will cost 5K plus a year for 5 EV certs. – Jacob Feb 15 '11 at 21:56
feedback
up vote 0 down vote

Wildcard usually costs more, however can be deployed to multiple servers thus eliminating certification renew process for every certificate used. By eliminating I mean, removing the entire process of renewing certificate at the CA. I'm personally vote for the wildcard.

link|improve this answer
feedback
up vote 0 down vote

Get the Wildcard SSL certificate. It is easier to manage and renew.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.