Can I purchase a single SSL certificate for domain A and sign all of my other domains with the domain A as reference.
Will it work ?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Can I purchase a single SSL certificate for domain A and sign all of my other domains with the domain A as reference.
Will it work ?
I think you’re looking for wildcard certificates. Issuing a cert for *.mydomain.com would be valid for sub1.mydomain.com, sub2.mydomain.com, etc.
If you’re looking to get a cert for mydomain.com and use that to generate a cert for otherdomain.com, that won’t work.
FYI, wildcard certs are more considerably more expensive from what I remember.
EDIT:
Rereading your question, you want to do second option, and no, you can’t do that. You’ll wind up with an invalid cert and most browsers put up giant warning signs that the cert isn’t from a trusted source. It will reference your cert for domain A as a trusted signer, which it is NOT, even though it WAS issued by a trusted signer further up the chain. If what you wanted to do was possible, the entire trusted signer/TLS infrastructure would be useless. (The utility of basic TLS as a verification that you’re dealing with whom you think your dealing is debatable since it’s trivial/inexpensive to get a cert. Hence the existence of Extended Validation Certificates.)