Portal Home > Knowledgebase > Articles Database > SSL certificate question
SSL certificate question
Posted by sameev29, 03-11-2012, 09:47 AM |
Can one ssl certificate be used to secure multiple domains in different servers?
I have seen many ssl companies providing unlimited server licensing.What's server licensing?
|
Posted by sameev29, 03-11-2012, 05:06 PM |
I am sure someone here knows about this,please tell me.
|
Posted by rcs, 03-11-2012, 05:17 PM |
the simple question is no. one ssl certificate can secure only one domain.
There are wild card certificate which can secure any number of the same domain's hostname. for example *.domain.com will secure test1.domain.com and test2.domain.com and www.domain.com. This subdomains don't have to be on the same server.
Of course every cerificate can actualy enable secure connection on any host, however if the domain name doesn't match the connection will spawns a cerificate error that clients don't like to see.
|
Posted by sameev29, 03-12-2012, 02:51 AM |
Are you sure I have seen companies like Geotrust,Comodo and Godaddy providing multiple domain securing certificate.
|
Posted by Flavio_GoDaddy, 03-12-2012, 02:09 PM |
Hi sameev29,
You are correct, a single UCC (Unified Communications Certificate) can protect multiple domains across multiple servers. Most commonly these SSLs are used for Microsoft Exchange servers, although they can be used for other applications.
There are several Certificate Authorities that offer these UCC SSls. and your above list are just a few of them.
|
Posted by sameev29, 03-12-2012, 03:03 PM |
Can these certificates secure domains of servers which are using the Linux OS or Cent OS?
What if different servers has different operating systems.What happens in this situation?
|
Posted by Flavio_GoDaddy, 03-12-2012, 03:49 PM |
Absolutely. UCC SSL's are compatible with any server that will allow an SSL with at least 2048bit encryption.
If the different servers are on different OS, you can export the SSL from the first server and import it into the second server. You may have to convert the exported file to a file type that is compatible with the second server. OpenSSL is a great tool to use in order to make these conversions, and can be downloaded from many places on the internet if you do not already have it.
|
Posted by sameev29, 03-12-2012, 05:25 PM |
If I keep the certificate in my server,can I use it secure other domains in different servers around the world.If the certificate will be securing many domains,what will be shown in the certificate?
|
Posted by Flavio_GoDaddy, 03-12-2012, 05:43 PM |
Yes, you can. The certificate can be installed on multiple servers in multiple locations around the world. The caveat of the UCC is that the primary common name is the name that will show on the certificate in the certificate details within a web browser.
To explain a little further, a UCC has a primary common name. This value cannot be changed. The UCC then has a limited number (depending on how many you purchase with the SSL provider) of Subject Alt Names (SANS) that will contain the additional protected common names.
If the names are un-related, you may want to use separate SSL's. For example, if you are securing sites for different customer's, with un-related businesses, you may want to consider using multiple SSL's.
|
Posted by sameev29, 03-13-2012, 03:03 AM |
If the clients websites are unrelated,I will have o use different SSL's,why?Different websites will have different domains,isn't the certificate supposed to secure them?
|
Posted by Gabe_GoDaddy, 03-13-2012, 11:48 AM |
You may want to use a different SSL for aesthetic purposes. While the SSL will still secure all domains listed on the UCC, if the businesses are unrelated the users perception of the individual businesses may be affected.
|
Posted by sameev29, 03-13-2012, 12:48 PM |
So when multiple domains are secured all be in the certificate.And when one visitor of a website(which is secured) see the certificate he will also be able to see the name of other domains secured by the certificate,right?
|
Posted by Gabe_GoDaddy, 03-13-2012, 12:59 PM |
Correct. The visitor will see the primary name declared for the UCC. Then from the Certificate Fields section there will be a field for Certificate Subject Alt Name where all SANs will be listed within the Field Value.
|
Posted by sameev29, 03-13-2012, 05:04 PM |
In the Godaddy website it's said that Note-Not recommended for use with sites where the content or business is unrelated.Example:
www.coolexample.com
shop.coolexample.com
register.coolexample.com
cert.coolexample.com
My question is can't I use Godaddy or any other providers certificate to secure domains which are unrelated?Example:
www.bdstudentstalk.com
www.coolwebsite.com
www.anothercoolone.com
..........................etc.
|
Posted by bdnero, 03-14-2012, 09:31 AM |
Not recommended" surely not stand for "not possible"
|
Posted by sameev29, 03-14-2012, 01:31 PM |
They didn't write it for nothing.There must some kind of problem related to it.Does anyone have any explanation?
|
Posted by sameev29, 03-14-2012, 05:22 PM |
Doesn't anyone know?
|
Posted by sameev29, 03-15-2012, 05:21 PM |
Does anyone have any experience with StartSSL?They also have multiple domain encryption feature.
|
Posted by sameev29, 03-16-2012, 07:58 AM |
Someone please tell me about Start SSL.
|
Add to Favourites Print this Article
Also Read