Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have created free StartSSL certificate (class 1, https://www.startssl.com/?app=1) for www.example.com which is also valid on subdomain dev.example.com.

Can I use this certificate, if www.example.com is on server 1 and dev.example.com on the second server? I'm using Apache.

Thanks for the reply.

share|improve this question

migrated from stackoverflow.com Nov 3 '11 at 12:48

This question came from our site for professional and enthusiast programmers.

3 Answers 3

up vote 2 down vote accepted

You cannot have both www.example.com and dev.example.com on a a Class 1 certificate. The Class 1 certificate is only valid for the base domain (example.com) and a single subdomain (dev.example.com).

To have valid SSL certs for both www.example.com and dev.example.com, you'll need to create multiple certificates or upgrade to Class 2 certificates. If the domains are on different IP addresses, either solution is fine. If you're sharing an IP address, multiple SSL certificates will only work properly for modern browsers that support Server Name Indication.

See also:

share|improve this answer
    
A note, "Class 1/2/etc." is marketing BS from Verisign and a few other vendors, as far as I can tell. They have no real meaning. –  ceejayoz May 7 '13 at 20:43
    
@ceejayoz As far as I can see, a higher class means that the identity has been checked more thoroughly. The only difference it makes for the resulting certificates is that they are signed from a different intermediate cert. Other than that, the certificates are equal (perhaps with an extra Organization field in the DN, but that does not really add extra value). –  Lekensteyn May 7 '13 at 20:50

On this website you will learn how to create your own Private Key, then send to startssl to certificate your subdomains.

Doing this, you will be using the same CSR for all your subdomains.

share|improve this answer
    
Welcome to Server Fault! Generally we like answers on the site to be able to stand on their own - Links are great, but if that link ever breaks the answer should have enough information to still be helpful. Please consider editing your answer to include more detail. See the FAQ for more info. –  slm May 7 '13 at 20:54

Shouldn't be a problem from the technical point of view.

I have no idea if this is ok according to the license.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.