Can you get an Extended Validation SSL certificate that applies to unlimited subdomains?

Question

Can you get an Extended Validation SSL certificate that applies to unlimited subdomains? Does it make technical sense? I'm using Digicert and they said that it wasn't possible to offer such a product.

Answer 1

Zoredache is correct. The EV Guidelines do not allow CAs to issue wildcard EV certificates. It does allow them to add multiple SAN names that can cover different subdomains or different domains and some providers are offering products that take advantage of this, but they are not wildcard certificates, just UC or SAN certificates.

So it is possible to cover "multiple" subdomains with an EV certificate but not "unlimited" subdomains.

Answer 2

The guidelines seem to explicitly forbid usages of wildcards in EV certs.

http://cabforum.org/EV%5FCertificate%5FGuidelines%5FV11.pdf

Certificate Field subject:commonName (OID 2.5.4.3) or SubjectAlternativeName:dNSName Required/Optional Required Contents This field MUST contain one or more host domain name(s) owned or controlled by the Subject and to be associated with Subject’s server. Such server MAY be owned and operated by the Subject or another entity (e.g., a hosting service). Wildcard certificates are not allowed for EV certificates.

Answer 3

While I'm not one to disagree with someone like Zoredache, I will point out that multiple CA's offer wildcard EV certificates for both sub-domains and in some cases multiple domains themselves.

See below:

http://www.globalsign.com/ssl/buy-ssl-certificates/unified-communications-ssl/

http://www.instantssl.com/ssl-certificate-products/addsupport/ssl-ev-mdc.html