Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

For a serverfarm with a tracking solution for several clients, I need a SSL certificate for multiple domains (3 different ones) and on each of the domains for all the subdomains.

I do only need it to get the tracking pixels without any browser warnings when embedded in https pages on client side. It is NOT used for security issues or so.

What might be the best product for my use-case?

Thanks

share|improve this question
    
are you saying you want a self-signed cert, or you just want us to tell you where to buy one? –  Mike Pennington Aug 3 '12 at 9:57
    
i'd like to know if there is something like a "multi domain" certificate, whether it is a good idea to book this instead of 3 single domain certificates and if there is a recommendation also where to get it. –  ledy Aug 3 '12 at 9:59
add comment

3 Answers

Yes, you can get SSL certificates that cover multiple domains -- they're usually called "multi-domain" or "universal communication" certificates, and they will have a single CN and a lengthy list of subjectAltNames. Most providers will sell you one, but it might cost you stupid amounts of money. We don't do provider recommendations, though (because who is who in the zoo changes so quickly). They're popular for people who want to do SSL on a number of domains, but don't want to (or can't) chew a lot of IP addresses (EC2 hosting, for instance).

share|improve this answer
    
is a multi-domain SSL cert also called a wildcard SSL cert, or is there a special name for the cert when it covers everthing under a TLD? –  Mike Pennington Aug 3 '12 at 10:14
    
No, a multi-domain cert is differenr to a wildcard cert. You're not (legitimately) going to get a wildcard cert that covers everything under a TLD, because that would allow you to MITM a large number of sites. –  womble Aug 3 '12 at 10:30
    
Sorry for the completely off-topic question, but what kind of SSL cert do people use for https proxies within an organization? Those certs must cover all domains, no? –  Mike Pennington Aug 3 '12 at 10:33
2  
You should ask that as a separate question. It's quite appropriate as a question in its own right. –  womble Aug 3 '12 at 10:34
add comment

As per my knowledge in your case it is impossible to cover multiple domain in a single ssl along with sub domains because the way you are asking for 1 multiple ssl with sub domain is not offered by any ssl brand though 3 different Wildcard SSLs must be effective and worth solutions for you.

share|improve this answer
add comment

There are 3rd party companies issuing SSL certificates which can be used for multiple domains and subdomains. These are called SAN (Subject Alternate Names) certificates. These are priced bit higher than standard 1 domain based SSL certificates. You can buy those certificates for certain number of SANs (Subject Alternate Names or domains and sub-domains). Initially you can specify all the domains/sub-domains for which you need the certificate for. But if you dont know all the domains/sub-domains right in the beginning, you can get it for few domains and then during its validity period you can get it reissued by adding more domains as Subject alternate names.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.