Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I've been using a wildcard SSL certificate in Apache Tomcat 7. But now that I have to renew, I see there are these EV (extended verification) SSL certificates where browsers show a nice green bar so users feel better. That would be important for my site, so I want it! But I have multiple subdomains and apparently EV SSL certificates are NOT wildcard by nature. So ok, I have a set number of subdomains, I can just buy a bunch (I definitely need at least 2) EV SSL certificates for each subdomain.

Can I set this up in Tomcat 7 so that there are multiple SSL certificates on 1 web application? It's not a problem for me to assign multiple IP addresses to this machine.

share|improve this question

1 Answer 1

up vote 0 down vote accepted

You can generally purchase unified communications Extended Validation certs from quite a few vendors, ( so you can have 1 cert that suuports multiple domains ). Digicert is one example of a CA offering these. Verisign also offers extended validation certs that support multiple SANs but Verisign is very expensive. I'd say shop around. I don't think GoDaddy will let you get an EV cert with multiple names attached to it but others do.

share|improve this answer
    
Interesting, I didn't know that was an option. So it's just 1 certificate that works for multiple domains and so the configuration for tomcat is just like a normal certificate? –  apptree Jun 13 '11 at 1:59
    
I don't know if you need to do anything special when you create the cert. I know with Verisign, you generate a CSR based on your primary common name and when you run through the purchasing process, they prompt you for additional domain names. It's been a very long time since I've purchased one of these though so I'd suggest you ping one of the customer service people at the CA to find out what the specifics are. Or maybe someone else reading this can make some suggestions. –  mahnsc Jun 13 '11 at 2:36

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.