1

I have an IIS server hosting several websites, like:

example.com
subdomain1.example.com
subdomain2.example.com

I want those websites to be able to use SSL.

If I install the certificate *.example.com, subdomain1.example.com and subdomain2.example.com work well, but when accessing example.com, Chrome shows a "This is probably not the site you are looking for!" message, as expected.

If I install the certificate example.com, then the first website work, but two other fail with the same message, as expected too.

What can I do to make both domains work, taking in account that there is only one IIS server with only one IP address?

Note: there is no such a thing as *example.com certificate, and all three websites will show the same error message.

2 Answers 2

3

What you're looking for is a SAN (or UCC) certificate.

1
  • 1
    Some certificate authorities will also include the "base" domain name as a subjectAlternateName on a wildcard certificate. Apr 11, 2012 at 19:43
0

As an alternative, if you have already purchased you SSLs for each of the aformentioned SSLs... you could assign each its own external IP address and then add the appropriate HTTPS bindings in IIS for those IPs with the corresponding SSL.

5
  • With IIS 7 and above it is now possible to include several HTTPS bindings on the same IP as well. Apr 17, 2012 at 2:41
  • But Tim, how would IIS know what SSL to use to decrypt the request? I conjecture IIS might not allow this. Apr 17, 2012 at 2:45
  • Ok, looks possible to use one ip with multiple SSLs using UCC with SAN. AAAAND IIS8 HAS SNI learn.iis.net/page.aspx/1096/… Apr 17, 2012 at 2:48
  • I stated that incorrectly. Multiple subdomains with different content on separate IIS sites may be hosted behind a single public IP and a single certificate. My bad for not reading closer. The SNI stuff doesn't look too well developed yet. Maybe that is just my paranoia though. Apr 17, 2012 at 2:54
  • Makes sense Tim! Apr 17, 2012 at 12:16

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .