Solved

Can I have one ssl certificate for multiple domains? (iis windows 2003 server)

Posted on 2009-05-05
6
510 Views
Last Modified: 2012-05-06
Hi,
I have a continuation of the question "Can I have one SSL certificate for 3 domains, IIS on a windows 2003 server?"
If the domains are as follows -   domain1.com  and domain2.com will the SAN cert or UC cert still work?  All the examples on the related question use   domain.com, domain.net.   Domain1.com is our original site and we have a requirement to create a dns alias as domain2.com.  Is there any way to get this to work without receiving the security error?    
0
Comment
Question by:carlssj1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 24307836

A SAN certificate will do just what you need. You would simply add all the domains the site can be accessed by as Alternate Names in the SAN certificate, then install it on the IIS Server.

Provided all the domains map to the same IIS site, this will not be a problem.

If they use multiple IIS sites then you need multiple certificates.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24307889
Let me clarify one more thing...
our situation is actually    xxx.domain2.com     alias of xxx.domain1.com
                                         yyy.domain2.com     alias of yyy.domain1.com

Will this still qualify for one SAN certificate or does it require multiple?

Thanks for your help.
Sandy
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24308005
additional info.....

yyy.domain1.com   is actually  extended sharepoint web application of xxx.domain1.com

Sandy
0
Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

 
LVL 58

Expert Comment

by:tigermatt
ID: 24318383

If you look in IIS Manager, do they actually appear as one 'Site' or two separate 'Sites'? Based on what you are saying, I would suggest they appear as one site.

If they are a single site which the two names both refer to, then a SAN certificate containing xxx.domain1.com and yyy.domain1.com will work for you.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24318449
xxx.domain1.com and yyy.domain1.com appear as two separate sites in iis.  xxx.domain1.com was created as a sharepoint site and then extended as yyy.domain1.com.  One site has a 'listener' in ISA and the other one doesn't.   The new domain sites - xxx.domain2.com and yyy.domain2.com  - were created as aliases of the two original sites in DNS.   They could both point to xxx.domain1.com if this will help us get by with just one certificate.   I really appreciate the help and I hope I have explained it clearly enough.
Thanks,
Sandy
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24318518

That's the information I needed to know. In that case, since they are two separate sites, you cannot use a SAN certificate. You will need to separate certificates, one for xxx and one for yyy.

-Matt
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question