4 ms·
GlobalSign's CloudSSL will issue certificates with up to (IIRC) 200 SAN extensions for somewhere around $2k, but wildcard certificates will cover most use cases
by iancarroll 10y ago
GlobalSign's CloudSSL will issue certificates with up to (IIRC) 200 SAN extensions for somewhere around $2k, but wildcard certificates will cover most use cases at a much lower price point.
- mook 10y agoA wildcard is a bad idea here since one compromised host would have a certificate that works on all other hosts. A better solution would be a sub CA that's restricted to issuing certificates for that domain only, but name constraints is an extension that some (obsolete) clients might not handle correctly.