I have an IIS server hosting several websites, like:


I want those websites to be able to use SSL.

If I install the certificate *.example.com, subdomain1.example.com and subdomain2.example.com work well, but when accessing example.com, Chrome shows a "This is probably not the site you are looking for!" message, as expected.

If I install the certificate example.com, then the first website work, but two other fail with the same message, as expected too.

What can I do to make both domains work, taking in account that there is only one IIS server with only one IP address?

Note: there is no such a thing as *example.com certificate, and all three websites will show the same error message.


What you're looking for is a SAN (or UCC) certificate.

  • 1
    Some certificate authorities will also include the "base" domain name as a subjectAlternateName on a wildcard certificate. – Shane Madden Apr 11 '12 at 19:43

As an alternative, if you have already purchased you SSLs for each of the aformentioned SSLs... you could assign each its own external IP address and then add the appropriate HTTPS bindings in IIS for those IPs with the corresponding SSL.

  • With IIS 7 and above it is now possible to include several HTTPS bindings on the same IP as well. – Tim Brigham Apr 17 '12 at 2:41
  • But Tim, how would IIS know what SSL to use to decrypt the request? I conjecture IIS might not allow this. – Chris Anton Apr 17 '12 at 2:45
  • Ok, looks possible to use one ip with multiple SSLs using UCC with SAN. AAAAND IIS8 HAS SNI learn.iis.net/page.aspx/1096/… – Chris Anton Apr 17 '12 at 2:48
  • I stated that incorrectly. Multiple subdomains with different content on separate IIS sites may be hosted behind a single public IP and a single certificate. My bad for not reading closer. The SNI stuff doesn't look too well developed yet. Maybe that is just my paranoia though. – Tim Brigham Apr 17 '12 at 2:54
  • Makes sense Tim! – Chris Anton Apr 17 '12 at 12:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.