Solved

Can I have one ssl certificate for multiple domains? (iis windows 2003 server)

Posted on 2009-05-05
6
506 Views
Last Modified: 2012-05-06
Hi,
I have a continuation of the question "Can I have one SSL certificate for 3 domains, IIS on a windows 2003 server?"
If the domains are as follows -   domain1.com  and domain2.com will the SAN cert or UC cert still work?  All the examples on the related question use   domain.com, domain.net.   Domain1.com is our original site and we have a requirement to create a dns alias as domain2.com.  Is there any way to get this to work without receiving the security error?    
0
Comment
Question by:carlssj1
  • 3
  • 3
6 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 24307836

A SAN certificate will do just what you need. You would simply add all the domains the site can be accessed by as Alternate Names in the SAN certificate, then install it on the IIS Server.

Provided all the domains map to the same IIS site, this will not be a problem.

If they use multiple IIS sites then you need multiple certificates.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24307889
Let me clarify one more thing...
our situation is actually    xxx.domain2.com     alias of xxx.domain1.com
                                         yyy.domain2.com     alias of yyy.domain1.com

Will this still qualify for one SAN certificate or does it require multiple?

Thanks for your help.
Sandy
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24308005
additional info.....

yyy.domain1.com   is actually  extended sharepoint web application of xxx.domain1.com

Sandy
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 58

Expert Comment

by:tigermatt
ID: 24318383

If you look in IIS Manager, do they actually appear as one 'Site' or two separate 'Sites'? Based on what you are saying, I would suggest they appear as one site.

If they are a single site which the two names both refer to, then a SAN certificate containing xxx.domain1.com and yyy.domain1.com will work for you.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24318449
xxx.domain1.com and yyy.domain1.com appear as two separate sites in iis.  xxx.domain1.com was created as a sharepoint site and then extended as yyy.domain1.com.  One site has a 'listener' in ISA and the other one doesn't.   The new domain sites - xxx.domain2.com and yyy.domain2.com  - were created as aliases of the two original sites in DNS.   They could both point to xxx.domain1.com if this will help us get by with just one certificate.   I really appreciate the help and I hope I have explained it clearly enough.
Thanks,
Sandy
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24318518

That's the information I needed to know. In that case, since they are two separate sites, you cannot use a SAN certificate. You will need to separate certificates, one for xxx and one for yyy.

-Matt
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question