Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 374
  • Last Modified:

What type of certificate do I need?

I have a customer who wants to spin up a CA in his domain and have it "certified" if you will by Go Daddy so that when he issues certificates, they will be valid and not self-signed.

What is that and is it doable?  Can I go to Go Daddy and get my certificate authority server certified to issue certs that will be in the chain all the way back up to go daddy and thus be accepted as valid by PCs and devices without it being viewed as self-signed?

Does that make sense?

Thanks

Cliff
0
crp0499
Asked:
crp0499
  • 2
1 Solution
 
Dave HoweSoftware and Hardware EngineerCommented:
You can, but they may not meet the requirements for that, or want to bear the cost.

Take a look here for example.
0
 
crp0499CEOAuthor Commented:
Thank you.  Seems simple enough!  :O
0
 
Dave HoweSoftware and Hardware EngineerCommented:
you might want to look at a Wildcard certificate instead. That is *.domain.xxx and covers you for any host in the same domain - so you can only have one www.domain.xxx but you can also have mail.domain.xxx, accounts.domain.xxx and so forth.

another option is a SAN certificate - that is a single certificate that carries a list of what hosts it is valid for - handy if your hosts aren't in the same domain.
0

Featured Post

Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now