Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want set up a wild card SSL cert for and point the dns for to Will that work (ie, will I be able to visit correctly, with a x-browser OK SSL connection)?

share|improve this question
Duplicate of Does an SSL certificate work on CNAME'd urls? – Chris S Mar 1 '11 at 18:47
up vote 1 down vote accepted

You will, unconditionally, need a certificate for in order for a connection to to go through without error. However, there are options for how you get there..

In the best-case scenario, we'd be living in a world where Server Name Indication could be used without breaking the site for large segments of the Windows-using population; this would make it pretty easy to just set up a second certificate for on the same server and you'd be good to go.

Because browser support isn't there, you've got two realistic options:

1) Obtain a certificate which contains both and as Subject Alternate Names. This is likely not possible, as you mentioned that you're using a wildcard certificate.

2) Set up a separate web server with a certificate, either serving the content directly or sending redirects over to

share|improve this answer

If by "point the DNS for" you mean a CNAME record or something like that, no, it will not work without a warning from the browser. If you type in or link to, that's what is checked against the SSL certificate, regardless of what your DNS records say.

What you could do is have an HTTP server at that does nothing but issue a 301 redirect to, then the browser will think that it's going to and it will match the certificate.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.