SSL certificate

Meraj mohd
Meraj mohd used Ask the Experts™
on
Hello Friends, I need your help, We have our main website www.pleugerindustries.com, this website already installed SSL certificate. We also have registered other domain like pleuger.com, pleuger.us, pleuger.info and pleuger.org. Now all these domain are just registered, nothing is there, there is no SSL certificate as well. When I redirected these website to our main website www.pleugerindustries.com it successfully redirected but its need SSL certificate. Although the main website already have SSL certificated installed. Do I need SSL for all other domain? If I leave it like this it will insecure for my main website?? kindly though some light on it. Many thanks in advance.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Sam JacobsDirector of Technology Development, IPM

Commented:
If your users access the other domains using HTTP, then you can redirect to https:www.pleugerindustries.com without any issues.
However, without a SAN (Subject Alternative Name) certificate, which has multiple names in the certificate, if someone browses to https://pleuger.com, for example, they will get a warning from their browser that it's an untrusted site (because the name differs from the one in the SSL certificate), and it will recommend to them that they do not continue.
Software Engineer
Distinguished Expert 2018
Commented:
A browser connects to your site  and receives a certificate from the site.
Then the browser compares the names in the certificate the the name that was typed in the URL.

So when you connect to pleuger.com and it returns a certificate ONLY mentioning pleugerindustries.com the certificate will be dismissed....

If your webserver support SNI then you can place multipe certificate with the webserver.
If the webserver does not support SNI, you may need to add a reverse proxy like Haproxy in front of it.

You may be able to request a certificate for pleugerindustries.com with all other domains as well.
(let's encrypt can help here (free certificates that have to be renewed every 3 months.. (which can be automated if needed).

Author

Commented:
Thanks dear friends. It is solved but I tried something else. The SSL was generated against the "www.pleugerindustries.com" so when I put complete name instead of only https://pleugerindustries.com. It works perfectly. Many thanks for your comments and enhancing my knowledge.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial