We've purchased a SAN certificate which means that we can put multiple SAN entries on the same certificate to use it for multiple websites. Right now our SAN list looks like:

domain1.com *.domain1.com *.domain2.com *.domain3.com

When we go to https://domain1.com this works fine, as does https://www.domain2.com, but we get an SSL error for https://domain2.com. Are we going to have to have 2 entries for each domain - the root domain and its subdomain wildcard - or is there a way for us to secure the root domain and its subdomains in one entry?

marked as duplicate by HBruijn May 23 '18 at 11:46

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • You will need an extra entry for the bare domain example.com as most ssl implementations will match *.example.com only with non-empty hostname patterns – HBruijn May 23 '18 at 11:50

Browse other questions tagged or ask your own question.