Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm thinking installing a wildcard cert for a site we are migrating from another company's server to our server.

The domain has many other subdomains, and I'm guessing some of them of single domain cert's on them, but they are all hosted on other servers - the cert I install would be the only one on the server.

Can anyone confirm for me that this setup is advisable?

Thanks.

share|improve this question

3 Answers 3

up vote 0 down vote accepted

If I understand correctly, there should be no problem with this setup. Only the (sub)domains on the new server will use the wildcard cert. All the others will use local certs. In fact, since it's a wildcard cert, you could copy it across all the servers.

share|improve this answer
    
Using the certificate on multiple servers will lower the security by increasing the chances for the certificate to be compromised. –  Mircea Vutcovici Apr 11 '12 at 17:52
    
@MirceaVutcovici while this is true, most vendors will allow for unlimited duplicate requests of a wildcard if you are licensed to use it on multiple servers. This will allow the same "certificate" to be used while having separate private keys on each. –  MDMarra Apr 11 '12 at 18:03

The certificate is local to the web server using it. There isn't something that connects back to the CA to make sure only one website is using the certificate you want to use. For kicks and giggles, you could have 100 different certificates for the same domain on the same machine and round robin them all if you wanted to.

share|improve this answer

There is not problem in this usage, but the wildcard certificate issued for *.example.com will work only for <subdomain>.example.com and not for <sub-subdomain>.<subdomain>.example.com.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.