Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm thinking about purchasing an SSL search for all subdomains of my domain. In other words, if I have a domain and I have the following subdomains which are all different servers..,, ... , Is it possible to get an SSL cert that will cover all of the different servers which are accessed via a subdomain address? How would this work? I imagine large companies don't just purchase a cert for each machine.

share|improve this question
up vote 3 down vote accepted

This is often called a UCC certificate.


Unified Communications Certificates (UCC) are SSL Certificates that secure multiple domains and multiple hostnames within a domain. They allow you to secure a primary domain, and up to 99 additional Subject Alternative Names, in a single certificate. UC Certificates are ideal for Microsoft® Exchange Server 2007, Exchange Server 2010, and Microsoft Live® Communications Server.

UC Certificates are compatible with shared hosting however, the site seal and certificate "Issued To" will only list the primary domain. Please note that any secondary hosting accounts will be listed in the certificate as well, so if you do not want sites to appear 'connected' to each other, you should not use this type of certificate.

share|improve this answer
As a note, this is note the same as the wildcard domains I mentioned. an UCC is supported better by mobile browsers and you can have extended validation. – Halfgaar Feb 16 '11 at 11:55
Correct. I might add that UCC certificates are indeed heaven for services like Exchange, havent encountered a single modern mobile phone who doesnt support it. – pauska Feb 16 '11 at 11:57

You can get wildcard certificates, however, they have their limits: no extended validation (so no company name in the browswer's address bar) and a few mobile platforms don't support them (windows mobile and symbian from the top of my head).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.