Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I just bought a multiple domains SSL certificate from godaddy.com for (an example):

site1.my-company.com

and

site2.your-company.com

both domains point to the same IP address. I hold the property of the first domain (my-company.com, the registrant data is the same I used to request the SSL certificate).

I do not hold the property of the second domine (your-company.com) but I have a full manage of it (without changing the owner data)

Do you think GoDaddy will reject my request for the second Subject Alternative Names (SAN) by checking the whois data ?

share|improve this question

closed as off-topic by ceejayoz, Jenny D, Ward, mdpc, Falcon Momot Jan 21 at 5:42

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must demonstrate a minimal understanding of the problem being solved. Try including attempted solutions, why they didn't work, and the expected results. See How can I ask better questions on Server Fault? for further guidance." – ceejayoz, Jenny D, Ward
If this question can be reworded to fit the rules in the help center, please edit the question.

    
Is a first post for me here, please comment the downvote. Many thanks. –  Seraphim Jan 20 at 15:17
1  
Just a suggestion, about your infrastructure (not part of the question but anyway) you should use SNI module, (rather than SANs) of your web server if you host multiple domaine on the same shared target. –  Dr I Jan 20 at 15:27
    
@DrI Not an option if you have users on Windows XP, though. –  ceejayoz Jan 20 at 15:37
    
I simply follow the instructions provided by GoDaddy and I never saw something regarding the use of SNI. –  Seraphim Jan 20 at 15:47
    
@ceejayoz gloup, didn't noticed that :'( –  Dr I Jan 20 at 15:52

1 Answer 1

You cannot get an SSL certificate for a domain you do not control. This is part of the fundamental point of SSL. GoDaddy will require you to verify ownership of the domain by sending a verification e-mail to the owner of your-company.com.

Without this sort of verification, I could get an SSL cert for Google, PayPal, etc., rendering SSL's protections against man-in-the-middle attacks entirely useless.

share|improve this answer
    
I can full manage the you-company.com domain but I can't change the owner data. –  Seraphim Jan 20 at 15:18
    
I can respond to email for confirmation... –  Seraphim Jan 20 at 15:23
1  
The verification e-mail will go to the owner of the domain per the WHOIS record. –  ceejayoz Jan 20 at 15:25
    
So I can respond to it, thanks –  Seraphim Jan 20 at 15:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.