A Wildcard SSL certificate allows a number of subdomains to be contained in the same SSL certificate.

learn more… | top users | synonyms

26
votes
2answers
5k views

Should a wildcard SSL certificate secure both the root domain as well as the sub-domains?

I ask this question, because Comodo are telling me that a wildcard certificate for *.example.com will also secure the root domain example.com. So with a single certificate, both my.example.com and ...
14
votes
1answer
680 views

How does this kind of SSL work?

"Issued to" and "Domain Name" doesn't match but still valid and accepted by all major browsers without any warning. While previewing my blog post in Blogger, I noticed that my blog was previewed via ...
6
votes
3answers
442 views

How to decide where to purchase a wildcard SSL certificate?

Recently I needed to purchase a wildcard SSL certificate (because I need to secure a number of subdomains), and when I first searched for where to buy one I was overwhelmed with the number of choices, ...
5
votes
1answer
2k views

Starfield Wildcard SSL Certificate Not Trusted in All Browsers

I am at a loss as to what else I might try in order to debug this issue with a Starfield Wildcard SSL Certificate. The problem is that in certain browsers (Safari or the most-updated chrome you can ...
5
votes
1answer
2k views

nginx ssl certificate issue key values mismatch

I am have been trying to setup an ssl certificate for a few days now, I am buying it from Namecheap.com and I am buying a rapid ssl wildcard certificate I am doing the following: Generate a csr - ...
4
votes
3answers
1k views

Wildcard SSL behaves inconsistently across browsers / OS's / computers

I've got a wildcard SSL certificate installed on a domain hosted with Media Temples Dedicated Virtual 4.0. Here's a simple example page that I'm trying to serve over SSL: ...
4
votes
4answers
638 views

Wildcard not working for sub-sub domain?

I have a wildcard SSL for a certain domain, for question purpose let's say *.example.com. It works fine if I match a direct sub-domain like aaaa.example.com, but when I try to associate a ...
4
votes
1answer
397 views

What is the maximum strength of a wildcard SSL certificate

i had an interesting conversation with a bank IT security employee, and they raised a few questions. What is the maximum strength/bit length of a wildcard domain certificate? Are they as secure? (in ...
4
votes
2answers
2k views

SQL Server 2008 R2 Express + Wildcard SSL Certificate

Wildcard certificates (for example, *.example.com) simply did not work in SQL Server 2008 or lower. But Encrypting Connections to SQL Server on MSDN states, plain as day, that SQL Server 2008 R2 ...
4
votes
1answer
194 views

SNI and wildcard SSL certificates on the same server with IIS

I'd like to host a website that should listen to subdomains (e.g. sub.domain.com) together with multiple websites that live just under a second-level domain (e.g. domain2.com, domain3.com) with IIS ...
3
votes
4answers
829 views

Nginx. How do I reject request to unlisted ssl virtual server?

I have a wildcard SSL certificate and several subdomains on the same ip. Now I want my nginx to handle only mentioned server names and drop connection for others so that it'd look like nginx is not ...
3
votes
1answer
5k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
3
votes
1answer
1k views

Amazon ELB HTTPS Backend authentication causing invalid certificate error

I have a wild card SSL certificate issued by Starfield Secure Certifcation Authority that is valid thru 2014. I have been using the certificate with ELB without backend authentication (cert not ...
2
votes
3answers
413 views

is wildcard ssl insecure?

Is there anything inherently more insecure about using a wildcard SSL certificate over a regular SSL certificate? We are looking to implement a subdomained web application (a la FreshBooks and ...
2
votes
2answers
1k views

nginx reverse ssl proxy with multiple subdomains

I'm trying to locate a high level configuration example for my current situation. We have a wildcard SSL certificate for multiple subdomains which are on several internal IIS servers. ...
2
votes
3answers
378 views

SSL wildcard certificates and trailing 'www'

I've got a wildcard SSL certificate for *.mydomain.com. I'm using nginx, and redirecting all traffic for http to https, and also rewriting the URLs without a trailing www (if there is one). So it ...
2
votes
3answers
186 views

Is it possible to install a wildcard SSL certificate on a server with one site which has multiple aliases (not sub-domains)

I run a small website (www.exampleurl.com) and want to be able to offer clients the ability to have a personalised URL (clientname.exampleurl.com). The important factor here is that each instance of a ...
2
votes
2answers
3k views

Why does apache httpd tell me that my name-based virtualhosts only works with SNI enabled browers (RFC 4366)

Why does apache give me this error message in my logs? Is it a false positive? [warn] Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366) I ...
2
votes
1answer
234 views

Are *.domain.com wild card SSL certificates expected to or required to only be used by 1 IP?

Are *.domain.com wild card SSL certificates expected to or required to only be used by 1 IP? Such that site1.domain.com is on ServerX and site2.domain.com is on ServerY where both servers have ...
2
votes
1answer
510 views

EC2 ELB Wildcard SSL Renewal “Invalid Public Key Certificate”

We have an existing ELB on EC2. It's got a GoDaddy issued wildcard ssl cert. I've downloaded the new .crt and gd_bundle.crt from GoDaddy. In ec2 I go to the load balancer, click the certificate, ...
2
votes
1answer
101 views

Multiple SSL certs for wildcard domain

I would like to set up an EV SSL certifcate for a few subdomains like blog.domain.com and www.domain.com. I also need to set up a wildcard PositiveSSl cert for *.domain.com, excluding blog.domain.com ...
2
votes
1answer
687 views

Wildcard certificate causes warning on Google Chrome only

I have a company.sv domain and recently purchased a RapidSSL wildcard certificate, I installed it and tested it with many browsers(Firefox, Chromium, Chrome, IE) and SSL checking tools, it worked fine ...
2
votes
1answer
1k views

nginx ssl wildcard cert issues

We currently have a single nginx server running as a backend proxy for 4-5 Apache servers. my problem is that after installing the ssl certificate i get the following error when testing the ssl ...
2
votes
1answer
87 views

wildcard ssl cert. giving error in IE

have a wildcard ssl cert issued to: *.domain.com The cert. is used on 4 virtual hosts in apache2: mail.domain.com gis.domain.com data.domain.com timecard.domain.com Firfox works great, no ...
2
votes
1answer
1k views

How to secure both root domain and wildcard subdomains with one SSL cert?

I am trying to generate a self-signed SSL certificate to secure both example.com and *.example.com. Looking at the answers to this and this questions, there seems to be an equal number of people ...
2
votes
1answer
373 views

ADFS 2.0 and Dynamics CRM 2011 SSL for what domain?

I have read that the best practice for an IFD Dynamics deployment is to use ADFS2.0 and lock it down with a wildcard SSL Certificate. The domain name I want to use for the Dynamics deployment is ...
2
votes
1answer
687 views

Wildcard SSL certificate not working with Chrome's built-in Flash player

I'm currently working on a system that has a Flash Client talking to a remote application server via RTMPS. The Flash Client and the app server handshake using an SSL wildcard certificate. For ...
1
vote
3answers
90 views

Are SSL certificates fixed to IP's within a region?

I need to purchase a wildcard ssl certificate. I am looking at purchasing it from Comodo, however when I go to purchase it there is a question asking to "select the region that you are located in". ...
1
vote
2answers
245 views

Do I need wildcard SSL for the www subdomain

I own example.com, example.net, and example.biz. I use Apache to rewrite example.net and example.biz to example.com. Based on this rewriting, it is my understanding that I would only need a ...
1
vote
2answers
1k views

Installed wildcard Certification not showing up in the IIS6 Available Certificates box

I've installed a GoDaddy wildcard certificate on my Win2003/IIS6 Server. It shows up in the Intermediate Certificate Authorities area of the MMC Certicates. All looks fine: Issued to: *.mydomain.com; ...
1
vote
1answer
312 views

Wildcard SSL not working for multiple subdomains

I have a wildcard SSL for my website, but I'm getting a strange error in my web browser(s). You attempted to reach app.dev.mysite.com, but instead you actually reached a server identifying itself ...
1
vote
4answers
428 views

Wildcard cert Exchange 2010 on Server 2008 R2 - broken pages, broken Droid connection?

Hardware/software info Server 2008 R2 64 bit IIS 7 Exchange 2010 Issues and steps taken: I have imported my Godaddy wildcard cert, and all intermediate certs related to the wildcard cert, into ...
1
vote
1answer
198 views

Is including internal servers into ssl certificate a problem?

We deploy a web application (Dynamics CRM) on a single IIS server which should be reachable from the internet. The application is only accessible with HTTPS. Therefore we need a ssl-certificate, ...
1
vote
1answer
1k views

Having many subdomains with SSL--best practices?

I have a site that has many subdomains (one for each client). The content for each subdomain will be different, pulling different data, different layouts etc, so I don't think I can just alias one ...
1
vote
1answer
166 views

Exchange 2010 Certificate Error

I began a transition from Exchange 2003 to Exchange 2010 today. At the moment nearly all of my users are still on 2K3 (save for a few test accounts on the 2K10 server.) As best as I can tell ...
1
vote
1answer
975 views

Why Apache is returning a wrong certificate?

I have foo.es site with a SSL wildcard certificate running since 2 years ago. Now I want to install another certificate for "*.foo.com" in the same server. I've copied the new foo_com.crt and ...
1
vote
1answer
1k views

godaddy SSL certificate shows domain name instead of full company name

We just took a deluxe wildcard (*.domain.com) certificate from godaddy. The process also included company name verification and company phone verification. After installing, the browser (firefox) ...
1
vote
1answer
20 views

wildcard certificates for linux mail servers

I would like to publish non-self-signed SSL certificates for some linux mail servers, which operate SSL and/or TLS mail services. (If relevant, these are dovecot+sendmail servers.) I need to cover ...
1
vote
1answer
27 views

Is it possible to deploy SSL catch-all certificate on different servers?

I have a "catch-all certificate" that I would like to use on another server that resides in another VM. How can I achieve this? I haven't seen any docs that explain otherwise.
1
vote
2answers
130 views

Apache mod_rewrite: domain -> www.domain with wildcard SSL

I have an Apache 2.2 server and a wildcard SSL certificate for *.domain.com and have set up a mod_rewrite ruleset for both 80 and 443 that will properly redirect requests for domain.com to ...
1
vote
1answer
193 views

Wildcard SSL certificate and subdomain levels

our server url schema is setup like this: customer-domain.extension.clients.example.com For example: customer-domain.net.clients.example.com So the clients.example.com never really changes but ...
1
vote
1answer
640 views

Apache, Wildcard SSL and mod_rewrite

I have a wildcard SSL cert, which is working fine: <VirtualHost *:443> ServerName star.mydomain.com DocumentRoot /dev/null SSLEngine On SSLCertificateFile ...
1
vote
3answers
215 views

Can you add a normal SSL certificate to the base of a wildcard certificate?

I have a wildcard SSL certificate setup on *.domain.com and its working fine. I now want to add a single ssl certificate to domain.com. Is this likely to cause me problems? I assume not, but I ...
1
vote
1answer
73 views

Can wildcard and single domain certificate coexist for the same domain

Because we have externally hosted applications by vendors under specific sub-domains (vendor1.domain.org, vendor2.domain.org...), we would like to keep single certificates for these sub-domains while ...
1
vote
1answer
228 views

Wildcard SSL certificates, EV

I run a Magento e-commerce store with multiple subdomains for an affiliate program, plus a main store. Example, foo.example.com and bar.example.com are affiliates, www.example.com is my main store. ...
1
vote
3answers
2k views

postfix smtps issue

Im currently experiencing the following issue with postfix over ssl (smtps) Apr 7 13:43:55 server88-208-248-147 postfix/smtpd[5777]: connect from xxxxxxxxxxxxxxx[xxx.xxx.xxx.xxx] Apr 7 13:45:09 ...
1
vote
1answer
2k views

setup multiple ssl certs on Amazon EC2 instance running on ubuntu 10.04

I need to secure 2 different domains that are both on the same EC2 instance. Reason: 1 is a sales website. the other is the webapp. Both need to access the same MySQL database. EDIT Sales website ...
1
vote
1answer
257 views

Install new wildcard SSL cert on top of existing single domain cert - any pitfalls?

I'm about to install a wildcard SSL cert *.example.com (from digicert) over top of an existing single domain cert www.example.com (from thwate). Are there any potential problems to watch out for when ...
1
vote
0answers
200 views

Outlook Internet Security Warning with UCC w/ Subject Alternative Names

I installed a certificate on the mail server with Subject Alternative Names. Thunderbird does not throw any warnings but when an Outlook 2007 client connects, it throws a warning titled, "Internet ...
1
vote
2answers
241 views

htaccess with wildcard SSL

We have a Wildcard SSL Certificate that is supposed to work on any subdomain of a given domain. So in this server we have this file structure: /home/DOMAIN/public_html/subdomainx ...