{"id":421,"date":"2017-03-13T07:20:52","date_gmt":"2017-03-13T07:20:52","guid":{"rendered":"http:\/\/stackofcodes.in\/?p=389"},"modified":"2017-03-13T07:20:52","modified_gmt":"2017-03-13T07:20:52","slug":"does-each-subdomain-need-its-own-ssl-certificate","status":"publish","type":"post","link":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/","title":{"rendered":"Does each subdomain need it’s own SSL certificate?"},"content":{"rendered":"

Do You Need an SSL Cert for Each Subdomain<\/strong><\/p>\n

Yes and No, it depends. Your standard SSL certificate will be for single domain, say ‘www.domain.com’. There are different types of certs you can aside from the standard single domain cert: wildcard and multi domain certs.<\/p>\n

A wild card cert will be issued for something like ‘*.domain.com’ and clients will treat this as valid for any domain that ends with ‘domain.com’, such as ‘www.domain.com’ or ‘ws.domain.com’.<\/p>\n

A multi domain cert is a cert that is valid for a predefined list of domain names. It does this by using the Subject Alternative Name field of the cert. For example, you could tell an CA that you want a multi domain cert for ‘domain.com’ and ‘ws.mysite.com’. This would allow it to be used for both domain names.<\/p>\n

If neither of these options work for you, then you would need to have two different SSL certs.<\/p>\n

Do I Need a Dedicated IP for Each Subdomain<\/strong><\/p>\n

Again, this is a yes and no…it all depends on you web\/application server. I am a Windows guy, so I will answer with IIS examples.<\/p>\n

If you are running IIS7 or older, then you are forced to bind SSL certs to an IP and you can not have multiple certs assigned to an single IP. This causes you to need to have a different IP for each subdomain if you are using a dedicated SSL cert for each subdomain. If you are using a multi domain cert or a wildcard cert, then you can get away with the single IP as you only have one SSL cert to begin with.<\/p>\n

If you are running IIS8 or later, then the same applies. However, IIS8+ includes support for something called Server Name Indication (SNI). SNI allows you to bind a SSL cert to a hostname, not to an IP. So the hostname (Server Name) that is used to make the request is used to indicate which SSL cert that IIS should use to for the request.<\/p>\n

If you use a single IP, then you can configure websites to respond to requests for specific hostnames.<\/p>\n

I know that Apache and Tomcat also have support for SNI, but I am not familiar them enough to know what versions support it.<\/p>\n

Bottom Line<\/strong><\/p>\n

Depending on you application\/web server and what type of SSL certs you are able to obtain will dictate you options.<\/p>\n","protected":false},"excerpt":{"rendered":"

Do You Need an SSL Cert for Each Subdomain Yes and No, it depends. Your standard SSL certificate will be for single domain, say ‘www.domain.com’. … <\/p>\n

<\/path><\/svg><\/span><\/a><\/path><\/svg><\/span><\/a><\/path><\/svg><\/span><\/a>\n","yoast_head_json":{"title":"Does each subdomain need it's own SSL certificate? - Logic Bytes","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/","og_locale":"en_US","og_type":"article","og_title":"Does each subdomain need it's own SSL certificate? - Logic Bytes","og_description":"Do You Need an SSL Cert for Each Subdomain Yes and No, it depends. Your standard SSL certificate will be for single domain, say ‘www.domain.com’. …","og_url":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/","og_site_name":"Logic Bytes","article_published_time":"2017-03-13T07:20:52+00:00","author":"Chandan Sharma","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Chandan Sharma","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/","url":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/","name":"Does each subdomain need it's own SSL certificate? - Logic Bytes","isPartOf":{"@id":"https:\/\/www.chandansharma.co.in\/blog\/#website"},"datePublished":"2017-03-13T07:20:52+00:00","dateModified":"2017-03-13T07:20:52+00:00","author":{"@id":"https:\/\/www.chandansharma.co.in\/blog\/#\/schema\/person\/0c7e3da957c6e1375f6b4c899d491b49"},"breadcrumb":{"@id":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.chandansharma.co.in\/blog\/does-each-subdomain-need-its-own-ssl-certificate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.chandansharma.co.in\/blog\/"},{"@type":"ListItem","position":2,"name":"Does each subdomain need it’s own SSL certificate?"}]},{"@type":"WebSite","@id":"https:\/\/www.chandansharma.co.in\/blog\/#website","url":"https:\/\/www.chandansharma.co.in\/blog\/","name":"Logic Bytes","description":"Spread Your Knowledge","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.chandansharma.co.in\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.chandansharma.co.in\/blog\/#\/schema\/person\/0c7e3da957c6e1375f6b4c899d491b49","name":"Chandan Sharma","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.chandansharma.co.in\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/42af2b8ad482f08d8902257fec963abc?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/42af2b8ad482f08d8902257fec963abc?s=96&d=identicon&r=g","caption":"Chandan Sharma"},"url":"https:\/\/www.chandansharma.co.in\/blog\/author\/chandan\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pajmea-6N","_links":{"self":[{"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/posts\/421"}],"collection":[{"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/comments?post=421"}],"version-history":[{"count":0,"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/posts\/421\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/media?parent=421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/categories?post=421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.chandansharma.co.in\/blog\/wp-json\/wp\/v2\/tags?post=421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}