I have a web app which offers a subdomain to each customer. Currently all the customer subdomains (e.g. user1.example.com, user2.example.com) and the root domain (i.e. www.example.com, example.com) are secured with a single wildcard certificate.
Now I would like to use an Extended Validation certificate for the root domain and keep using the wildcard certificate for the subdomains.
Is it possible to configure HAProxy to serve a different certificate based on that condition? Is it possible to have just one backend and only use a different certificate?
This question is different from this one because in my case both certificates would be valid for the root domain, so HAProxy can't figure out automatically which certificate should use. I need a way to explicitly set which certificate should be used based on the requested domain (SNI). Indeed for the root domain I want to use the EV certificate (instead of the wildcard one).