Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I run a small website ( and want to be able to offer clients the ability to have a personalised URL ( The important factor here is that each instance of a personalised URL is just an alias to the original site rather than being a new website instance within IIS.

I've bought a wildcard SSL certificate but now my hosting company has told me that it can only be used in the case of new website instances, not aliases.

Is this true? It's surprisingly hard to Google this information. The hosting provider runs IIS7.5. Any insight would be appreciated.

share|improve this question
up vote 2 down vote accepted

We needed the exact same setup with our wildcard cert. we did this, create a dns entry like below where is your ip address for

*     Host (A)    Default

Then make sure your app on can listen to all traffic on regardless of host header. That should do it.

share|improve this answer
Thanks for your post. I'll give that a shot! – user72964 Feb 13 '13 at 11:56

I just ran a little test:

IIS 7.5, one running website with a binding of

'https 443'

SSL certificate: * (your wildcard cert)

In my hosts file, I added:

Using:, and in a browser all work fine.

Your client uses his url (, DNS resolves the IP address and the browser sends the request. IIS7.5 sees an SSL request and just uses the IP address not the host name to figure out which site to serve based on the IP address and the port.

Because there is only one site this works.

If you want to use different sites for different host names you need to move up to IIS8 on Server 2012.

share|improve this answer
I am sure this answer is valid, but unfortunately I'm running this hosted site on a shared platform, so there is more than one site configured on IIS. I will look into moving to a dedicated server solution, and will give this a go. Thanks for your input. – user72964 Feb 13 '13 at 11:58

As per my understanding of wildcard SSL certificate, you can secure unlimited sub domain of a and domain it self. Here the main condition is; they should be hosted in same private IP address.

Here you need to understand how SSL certificate works:

When you assign SSL certificate to any domain, it works on web server and while you creating Alias for that domain, it is not an actual identity, but just a DNS forwarding. here when you execute your alias, your main domain will execute for authentication not that alias. So, it will not be possible to authenticate your alias.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.