Caveat: I'm a developer by trade (so please use small words).
A vendor hosts a secure site for us that is branded with our name/domain, orders.oursite.com. Since original setup we've purchased a wildcard cert for *.oursite.com. As I understand it, the basic process for renewing the cert is:
- Vendor generates CSR from each server.
- We receive a cert based on each CSR for each server from our certification authority.
- Vendor installs each cert.
Our vendor (we are an IIS shop/they use Apache) is telling us that we must buy (renew) the specific orders.oursite.com and they can't install a cert that's been generated against *.oursite.com. Is there any truth to this that my network engineers and I are missing?
Update Under the category of information I could've used in advance, apparently they have some IBM application that prevents use of a wildcard cert. What it does or how it goes about it, I have no idea.