4

We want to have a single SSL certificate for a web site so that the website can be accessed with a domain name and IP address. Is this possible?

6

Yup, when the SAN field of the SSL certificate contains the IP:XXX.XX.XX.XXX value it's possible to successfully connect to such a service without warnings (for a known CA, of course).

But in reality this has to be supported by the CA you are buying the certificate from. In my experience I don't remember seeing such options in commercial CA web interfaces, though this doesn't mean you won't find one.

  • 1
    Note that IP address must be duplicated as DNS Name as well. That is, SAN should consist of at least 3 entries: DNSName=FQDN,DNSName=xxx.xxx.xxx.xxx,IPAddress=xxx.xxx.xxx.xxx – Crypt32 Feb 12 '15 at 19:37
  • GoDaddy sells these multi-domain certificates, so I'm sure you can buy them elsewhere too. – roaima Feb 12 '15 at 23:20
  • i have created two SSL certificate, 1 with IP and other with DNS. i have imoprted both the certificates into single keystore. Now i wanted to use both certificates for web site, so that website can be accessed with IP and DNS. is it possible? – user270124 Feb 13 '15 at 14:48
  • @Crypt32, could you verify? I know, it is DNS:FQDN. Are you sure, it is IPAddress= rather than IP:? – Mikhail T. Sep 28 '17 at 20:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.