We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?
1 Answer
Yup, when the SAN
field of the SSL certificate contains the IP:XXX.XX.XX.XXX
value it's possible to successfully connect to such a service without warnings (for a known CA, of course).
But in reality this has to be supported by the CA you are buying the certificate from. In my experience I don't remember seeing such options in commercial CA web interfaces, though this doesn't mean you won't find one.
-
1Note that IP address must be duplicated as DNS Name as well. That is, SAN should consist of at least 3 entries: DNSName=FQDN,DNSName=xxx.xxx.xxx.xxx,IPAddress=xxx.xxx.xxx.xxx– Crypt32Feb 12, 2015 at 19:37
-
GoDaddy sells these multi-domain certificates, so I'm sure you can buy them elsewhere too. Feb 12, 2015 at 23:20
-
i have created two SSL certificate, 1 with IP and other with DNS. i have imoprted both the certificates into single keystore. Now i wanted to use both certificates for web site, so that website can be accessed with IP and DNS. is it possible? Feb 13, 2015 at 14:48
-
@Crypt32, could you verify? I know, it is
DNS:FQDN
. Are you sure, it isIPAddress=
rather thanIP:
? Sep 28, 2017 at 20:00