1

I have a wildcard SSL certificate setup on *.domain.com and its working fine. I now want to add a single ssl certificate to domain.com.

Is this likely to cause me problems? I assume not, but I thought it would be good to check that someone else has done it.

Improve this question

3 Answers 3

Reset to default
1

You need a different IP for each different SSL cert you use. So you'll need two IPs.

It's not clear why you want to use another SSL cert, is it an EV cert?

Improve this answer
6
  • Speaking for Windows IIS 6 and beyond, there is a feature called SSL Host Headers that allows for this very scenario. (microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/…)
    – Dscoduc
    Jun 2, 2010 at 3:18
  • Dscouduc: SSL Host Headers is a misnomer at best; it allows you to use one cert for multiple sites (the poster asked about multiple certs for one site); but the cert has to be a wildcard cert that matches all the sites covered.
    – Chris S
    Jun 2, 2010 at 3:34
  • Not sure why you think it's a misnomer... many people choose to do this for their environment to avoid having to use multiple IP addresses for their websites.
    – Dscoduc
    Jun 2, 2010 at 6:14
  • It's a misnomer because it's stetting up the SSL tunnel without any knowledge of the Host Header; after the tunnel is successfully setup, it uses standard Host Headers to determine the site.
    – Chris S
    Jun 2, 2010 at 12:22
  • Perhaps. But what is happening is most important. The SSL connection can take place without SSL warnings and the IIS Server can redirect the client to the appropriate web site based on the "host headers"... Sounds pretty clear and simple to me. If you want to get hung up on the title that's fine, but you can't argue with the result... Cheers.
    – Dscoduc
    Jun 2, 2010 at 16:07
1

There shouldn't be a problem mixing the wildcard and specific certificates. Not sure why you would need to do this as the wildcard certificate should be able to handle all domain.com requests. You should also be able to bind the same wildcard certificate to multiple websites, meaning you don't need a unique certificate for each website.

Improve this answer
1
  • 1
    For future reference: a wildcard certificate for *.example.com is not by itself valid for example.com, but most (all?) wildcard certs also include example.com as a Subject Alternative Name.
    – Joel L
    Jul 30, 2012 at 12:50
-1

If you have wildcard ssl certificate so why you want to purchase other ssl certificate.

Wildcard SSL certificate is the best solution for your requirement. It can secure your main domain (domain.com) and unlimited sub domains (*.domain.com). it means your main domain and all sub domains are secures with single wildcard certificate.

Improve this answer
1
  • No. If you have a wildcard *.example.com, the wildcard is only valid for all sub-domains under example.com, not for example.com itself.
    – Jenny D
    Oct 2, 2015 at 3:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .