3 ms·

FYI, if you buy a wildcard cert covering .example.com, example.com itself does not match -- only subdomains do.

iigs 18y ago
This is true, and it makes hosting www.example.com and example.com on the same IP somewhat difficult. Certain newer browsers understand the Subject Alternative Name format. Here's a link about it: http://www.digicert.com/subject-alternative-name.htm http://www.digicert.com/subject-alternative-name.htm I don't know anything about the linked site, so I'm not endorsing their products.
- metachor 18y ago
  Digicert is a legitimate provider of SSL certificates (my company uses them pretty much exclusively; I don't think they are any better or worse than other SSL providers that I've used professionally). One exceptional thing Digicert provides is good practical documentation for generating a certificate signing request and applying a purchased certificate to any web or application server. Makes it really easy for junior admins to get up to speed when they have to apply certs to everything from IIS to Apache, Tomcat JBoss, etc within the same environment.
  - mishmash 18y ago
    Actively considering using Digicert here so your info is appreciated. We can work around the primary domain not matching because our landing page has no real need for SSL, however, we do very much need iPhone support on the subdomains. Would you happen to know if Digicert Wildcard SSL certs work on the iPhone? Thanks
    - robertss 18y ago
      The DigiCert Wildcard cert does work on the iPhone.
      - mishmash 18y ago
        Great, thanks.
- brlewis 18y ago
  Just redirect. When people are typing in a URL manually and by habit add an unnecessary www., they're probably not typing https. I have www.ourdoings.com redirect to ourdoings.com for example.
nuclear_eclipse 18y ago
Is there any site that covers the topics of wildcard certs in more detail, such as what different wildcards do/don't allow you to do, etc? I'm personally looking for a wildcard cert to cover my main site, leetcode.net, as well as all of my subdomains (mail.leetcode.net, etc). Is this possible? What cert do I need?
- olefoo 18y ago
  You need two certs: 1. CN=example.com 2. CN=*.example.com If all you are using the secondary cert for is to provide a TLS signing token you can get away with just a cert for the domain. You have to play some tricks with DNS and hostnames, if you are spreading services between different machines (and it's hokey to do it that way if you want to be a service provider) but it can be made to work.

iigs 18y ago

This is true, and it makes hosting www.example.com and example.com on the same IP somewhat difficult. Certain newer browsers understand the Subject Alternative Name format. Here's a link about it: http://www.digicert.com/subject-alternative-name.htm http://www.digicert.com/subject-alternative-name.htm I don't know anything about the linked site, so I'm not endorsing their products.

metachor 18y ago
Digicert is a legitimate provider of SSL certificates (my company uses them pretty much exclusively; I don't think they are any better or worse than other SSL providers that I've used professionally). One exceptional thing Digicert provides is good practical documentation for generating a certificate signing request and applying a purchased certificate to any web or application server. Makes it really easy for junior admins to get up to speed when they have to apply certs to everything from IIS to Apache, Tomcat JBoss, etc within the same environment.
- mishmash 18y ago
  Actively considering using Digicert here so your info is appreciated. We can work around the primary domain not matching because our landing page has no real need for SSL, however, we do very much need iPhone support on the subdomains. Would you happen to know if Digicert Wildcard SSL certs work on the iPhone? Thanks
  - robertss 18y ago
    The DigiCert Wildcard cert does work on the iPhone.
    - mishmash 18y ago
      Great, thanks.
brlewis 18y ago
Just redirect. When people are typing in a URL manually and by habit add an unnecessary www., they're probably not typing https. I have www.ourdoings.com redirect to ourdoings.com for example.

nuclear_eclipse 18y ago

Is there any site that covers the topics of wildcard certs in more detail, such as what different wildcards do/don't allow you to do, etc? I'm personally looking for a wildcard cert to cover my main site, leetcode.net, as well as all of my subdomains (mail.leetcode.net, etc). Is this possible? What cert do I need?

olefoo 18y ago
You need two certs: 1. CN=example.com 2. CN=*.example.com If all you are using the secondary cert for is to provide a TLS signing token you can get away with just a cert for the domain. You have to play some tricks with DNS and hostnames, if you are spreading services between different machines (and it's hokey to do it that way if you want to be a service provider) but it can be made to work.