Solved

Can I have one ssl certificate for multiple domains? (iis windows 2003 server)

Posted on 2009-05-05
6
508 Views
Last Modified: 2012-05-06
Hi,
I have a continuation of the question "Can I have one SSL certificate for 3 domains, IIS on a windows 2003 server?"
If the domains are as follows -   domain1.com  and domain2.com will the SAN cert or UC cert still work?  All the examples on the related question use   domain.com, domain.net.   Domain1.com is our original site and we have a requirement to create a dns alias as domain2.com.  Is there any way to get this to work without receiving the security error?    
0
Comment
Question by:carlssj1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 58

Expert Comment

by:tigermatt
ID: 24307836

A SAN certificate will do just what you need. You would simply add all the domains the site can be accessed by as Alternate Names in the SAN certificate, then install it on the IIS Server.

Provided all the domains map to the same IIS site, this will not be a problem.

If they use multiple IIS sites then you need multiple certificates.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24307889
Let me clarify one more thing...
our situation is actually    xxx.domain2.com     alias of xxx.domain1.com
                                         yyy.domain2.com     alias of yyy.domain1.com

Will this still qualify for one SAN certificate or does it require multiple?

Thanks for your help.
Sandy
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24308005
additional info.....

yyy.domain1.com   is actually  extended sharepoint web application of xxx.domain1.com

Sandy
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 58

Expert Comment

by:tigermatt
ID: 24318383

If you look in IIS Manager, do they actually appear as one 'Site' or two separate 'Sites'? Based on what you are saying, I would suggest they appear as one site.

If they are a single site which the two names both refer to, then a SAN certificate containing xxx.domain1.com and yyy.domain1.com will work for you.

-Matt
0
 
LVL 1

Author Comment

by:carlssj1
ID: 24318449
xxx.domain1.com and yyy.domain1.com appear as two separate sites in iis.  xxx.domain1.com was created as a sharepoint site and then extended as yyy.domain1.com.  One site has a 'listener' in ISA and the other one doesn't.   The new domain sites - xxx.domain2.com and yyy.domain2.com  - were created as aliases of the two original sites in DNS.   They could both point to xxx.domain1.com if this will help us get by with just one certificate.   I really appreciate the help and I hope I have explained it clearly enough.
Thanks,
Sandy
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24318518

That's the information I needed to know. In that case, since they are two separate sites, you cannot use a SAN certificate. You will need to separate certificates, one for xxx and one for yyy.

-Matt
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question