Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Problems with SSL and multi level subdomains

Tags:

ssl

subdomain

I have a wildcard SSL from Godaddy. When I go here:

https://conciergelive.conciergeliveapp.com/users_session/new 

Everything is fine. But when I go here:

https://es.conciergelive.conciergeliveapp.com/users_session/new 

I get a security alert. I need the extra subdomain to determine locality. Any ideas why this does not work?

like image 209
Binary Logic Avatar asked Mar 14 '11 06:03

Binary Logic


People also ask

Can I use SSL certificate on multiple subdomains?

The simple answer is a resounding Yes! You absolutely can use one SSL certificate for multiple domains — or one SSL certificate for multiple subdomains in addition to domains.

Does SSL certificate work on subdomains?

A wildcard SSL certificate is used if you have multiple subdomains that need to be secured at the same level. A single certificate is issued to encrypt your domain along with an unlimited number of subdomains.

Do wildcard certificates work for second level subdomains?

A multi-domain wildcard SSL certificate is the perfect solution for situations where you need to secure multi-level subdomains. It allows encrypting multiple levels of subdomains with one certificate. Like the wildcard certificate, it can work whether the sites are on the same or separate servers.

Does a wildcard SSL cover all subdomains?

A Wildcard SSL certificate is marketed as being able to secure “unlimited subdomains” and that's partially true but with the caveat that all those sub-domains must be at the same level of the URL.


1 Answers

According to RFC 2818 Http Over SSL, section 3.1:

Names may contain the wildcard character * which is considered to match any single domain name component or component fragment. E.g., *.a.com matches foo.a.com but not bar.foo.a.com

it explains why the name *.conciergeliveapp.com in the certifacte matches conciergelive.conciergeliveapp.com but not es.conciergelive.conciergeliveapp.com

like image 76
Jcs Avatar answered Sep 20 '22 06:09

Jcs