4

We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?

0

1 Answer 1

7

Yup, when the SAN field of the SSL certificate contains the IP:XXX.XX.XX.XXX value it's possible to successfully connect to such a service without warnings (for a known CA, of course).

But in reality this has to be supported by the CA you are buying the certificate from. In my experience I don't remember seeing such options in commercial CA web interfaces, though this doesn't mean you won't find one.

4
  • 1
    Note that IP address must be duplicated as DNS Name as well. That is, SAN should consist of at least 3 entries: DNSName=FQDN,DNSName=xxx.xxx.xxx.xxx,IPAddress=xxx.xxx.xxx.xxx
    – Crypt32
    Feb 12, 2015 at 19:37
  • GoDaddy sells these multi-domain certificates, so I'm sure you can buy them elsewhere too. Feb 12, 2015 at 23:20
  • i have created two SSL certificate, 1 with IP and other with DNS. i have imoprted both the certificates into single keystore. Now i wanted to use both certificates for web site, so that website can be accessed with IP and DNS. is it possible?
    – user270124
    Feb 13, 2015 at 14:48
  • @Crypt32, could you verify? I know, it is DNS:FQDN. Are you sure, it is IPAddress= rather than IP:?
    – Mikhail T.
    Sep 28, 2017 at 20:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .