Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hoping this is the right stack to ask in. If not, please direct me to the correct one.

I am working with a client right now, and I need to know if their SSL certificate supports wildcard domains or not. The engineers on their side aren't aware of the answer, and I'm afraid it will take them too long to find out.

Is there a way to know this or not based on the certificate viewable in the browser?

share|improve this question

the ssl certificate is tied into a domain name - so simply inspect the certificate and if the domain listed is * then it is a wildcard - if the domain is then it is specific to that domain.

share|improve this answer
Thanks. If I check the certificate on their homepage, its in the format * If I check their login page, the cert appears as Also, from another https page, the Common Name in the cert is listed as So does it mean that all the subdomains are being covered under *, or do they have individual certs for each section of their site? – Geuis Aug 17 '12 at 21:07
Looks like they have they have one wildcard certificate + some regular certificates – user130370 Aug 17 '12 at 23:04

This can be done by checking for the common name in the SSL's subject. You can use the bash command openssl on *NIX clients.

For instance, and use two different SSLs. The first is a wildcard, the second is domain specific.

$ echo | openssl s_client -connect 2>/dev/null | openssl x509 -noout -subject | grep -o "CN=.*" | cut -c 4-
$ echo | openssl s_client -connect 2>/dev/null | openssl x509 -noout -subject | grep -o "CN=.*" | cut -c 4-
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.