views:

123

answers:

2

I don't know much about secure certificates, so please bear with me...

I've got a webserver that has a single domain SSL certificate

https://secure.mysite.com

I also have a couple of subdomains that point to different servers.

http://www.mysite.com ( main server) 

http://subdomain.mysite.com (completely different server)

I am wondering: What is the best way to add SSL to the subdomain:

https://subdomain.mysite.com

Is it possible to configure something like this with a wildcard certificate? Or is it better to purchase another single-domain certificate and install it on the seperate server?

Are there any special considerations / pitfalls in doing something like this?

Thanks, in advance, for your help.

A: 

Wild card certificates only cover domains on the same server. I believe it's because the key used in the certificate is tied back to the server.

If you want to add a certificate for sites on other servers you will need specific certificates for those server/domain combinations.

Chris
Not really, Chris. If you have a wildcard cert you will need to copy the private key to every server you want to serve with that wildcard cert, but if you do that it will work fine.
GregS
fair'nuff :) I was answering based on my (albeit limited) experience installing certs into IIS.
Chris
A: 

You can get a wildcard cert but that is probably more expensive than you need and you'd need to copy your private key to each server -- which really is not recommended unless you are a crypto expert. You are better off simply purchasing two more certs for the two additional machines.

GregS