Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

so, I'm was discussing with a friend about SaaS websites and SSL certificates and neither of us could explain how do a E-commerce or any service that would allow a costumer to have their own domains would have SSL enabled services.

I've searched about UCC and Wildcard Certificates , but neither seem to fit the needs because in the case of a UC Certificate you would need to have a list of domains already made (which is not the case in the SaaS model) and in the case of a Wildcard Certificate you would necessarily need to make each client a subdomain and many services provide the option to use your own domain.

So how do SaaS services provide SSL for the people with "personalized" domains?

share|improve this question
Have you considered the simple solution? They just have a big block of IP address space and allocate one IP per client. It is difficult to get lots of addresses now, but it was easier in the past. – Zoredache Jul 26 '12 at 19:25
up vote 2 down vote accepted

They typically use UCC SSL Certificates, which allows them to secure multiple domain names through the use of Subject Alternative Names. You can reissue a certificate with an updated list of domains it secures, so you're not just limited to the domains you secure when you first create the certificate.

Some providers have products specifically marketed for this, like Globalsign: which is used by Cloudflare.

As a provider, you could pretty much just create one SSL certificate for each customer you have with the domains and subdomains they need secured and reissue it if the client has removed a certain domain from their account. As an SaaS provider, you typically control the setup of the SSL certificates as well, so pretty much everything can be automated.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.