I just bought a multiple domains SSL certificate from godaddy.com for (an example):




both domains point to the same IP address. I hold the property of the first domain (my-company.com, the registrant data is the same I used to request the SSL certificate).

I do not hold the property of the second domine (your-company.com) but I have a full manage of it (without changing the owner data)

Do you think GoDaddy will reject my request for the second Subject Alternative Names (SAN) by checking the whois data ?

closed as off-topic by ceejayoz, Jenny D, Ward, mdpc, Falcon Momot Jan 21 '14 at 5:42

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must demonstrate a minimal understanding of the problem being solved. Try including attempted solutions, why they didn't work, and the expected results. See How can I ask better questions on Server Fault? for further guidance." – ceejayoz, Jenny D, Ward
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Is a first post for me here, please comment the downvote. Many thanks. – Seraphim Jan 20 '14 at 15:17
  • 1
    Just a suggestion, about your infrastructure (not part of the question but anyway) you should use SNI module, (rather than SANs) of your web server if you host multiple domaine on the same shared target. – Dr I Jan 20 '14 at 15:27
  • @DrI Not an option if you have users on Windows XP, though. – ceejayoz Jan 20 '14 at 15:37
  • I simply follow the instructions provided by GoDaddy and I never saw something regarding the use of SNI. – Seraphim Jan 20 '14 at 15:47
  • @ceejayoz gloup, didn't noticed that :'( – Dr I Jan 20 '14 at 15:52

You cannot get an SSL certificate for a domain you do not control. This is part of the fundamental point of SSL. GoDaddy will require you to verify ownership of the domain by sending a verification e-mail to the owner of your-company.com.

Without this sort of verification, I could get an SSL cert for Google, PayPal, etc., rendering SSL's protections against man-in-the-middle attacks entirely useless.

  • I can full manage the you-company.com domain but I can't change the owner data. – Seraphim Jan 20 '14 at 15:18
  • I can respond to email for confirmation... – Seraphim Jan 20 '14 at 15:23
  • 1
    The verification e-mail will go to the owner of the domain per the WHOIS record. – ceejayoz Jan 20 '14 at 15:25

Not the answer you're looking for? Browse other questions tagged or ask your own question.