0

For a serverfarm with a tracking solution for several clients, I need a SSL certificate for multiple domains (3 different ones) and on each of the domains for all the subdomains.

I do only need it to get the tracking pixels without any browser warnings when embedded in https pages on client side. It is NOT used for security issues or so.

What might be the best product for my use-case?

Thanks

Improve this question
2
  • are you saying you want a self-signed cert, or you just want us to tell you where to buy one?
    – Mike Pennington
    Aug 3, 2012 at 9:57
  • i'd like to know if there is something like a "multi domain" certificate, whether it is a good idea to book this instead of 3 single domain certificates and if there is a recommendation also where to get it.
    – ledy
    Aug 3, 2012 at 9:59

2 Answers 2

Reset to default
3

Yes, you can get SSL certificates that cover multiple domains -- they're usually called "multi-domain" or "universal communication" certificates, and they will have a single CN and a lengthy list of subjectAltNames. Most providers will sell you one, but it might cost you stupid amounts of money. We don't do provider recommendations, though (because who is who in the zoo changes so quickly). They're popular for people who want to do SSL on a number of domains, but don't want to (or can't) chew a lot of IP addresses (EC2 hosting, for instance).

Improve this answer
4
  • is a multi-domain SSL cert also called a wildcard SSL cert, or is there a special name for the cert when it covers everthing under a TLD?
    – Mike Pennington
    Aug 3, 2012 at 10:14
  • No, a multi-domain cert is differenr to a wildcard cert. You're not (legitimately) going to get a wildcard cert that covers everything under a TLD, because that would allow you to MITM a large number of sites.
    – womble ♦
    Aug 3, 2012 at 10:30
  • Sorry for the completely off-topic question, but what kind of SSL cert do people use for https proxies within an organization? Those certs must cover all domains, no?
    – Mike Pennington
    Aug 3, 2012 at 10:33
  • 2
    You should ask that as a separate question. It's quite appropriate as a question in its own right.
    – womble ♦
    Aug 3, 2012 at 10:34
0

There are 3rd party companies issuing SSL certificates which can be used for multiple domains and subdomains. These are called SAN (Subject Alternate Names) certificates. These are priced bit higher than standard 1 domain based SSL certificates. You can buy those certificates for certain number of SANs (Subject Alternate Names or domains and sub-domains). Initially you can specify all the domains/sub-domains for which you need the certificate for. But if you dont know all the domains/sub-domains right in the beginning, you can get it for few domains and then during its validity period you can get it reissued by adding more domains as Subject alternate names.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.