Ask HN: Where should I buy an SSL certificate for my site?

Re:Ask HN: Where should I buy an SSL certificate for my site? by rarrrrrr on Tuesday February 03, 2009 @07:24PM (#465028)

FYI, if you buy a wildcard cert covering .example.com, example.com itself does not match -- only subdomains do.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by iigs on Tuesday February 03, 2009 @08:36PM (#465107)

This is true, and it makes hosting www.example.com and example.com on the same IP somewhat difficult. Certain newer browsers understand the Subject Alternative Name format. Here's a link about it: http://www.digicert.com/subject-alternative-name.htm

I don't know anything about the linked site, so I'm not endorsing their products.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by metachor on Tuesday February 03, 2009 @10:26PM (#465208)

Digicert is a legitimate provider of SSL certificates (my company uses them pretty much exclusively; I don't think they are any better or worse than other SSL providers that I've used professionally).

One exceptional thing Digicert provides is good practical documentation for generating a certificate signing request and applying a purchased certificate to any web or application server. Makes it really easy for junior admins to get up to speed when they have to apply certs to everything from IIS to Apache, Tomcat JBoss, etc within the same environment.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by mishmash on Wednesday February 04, 2009 @02:05AM (#465376)

Actively considering using Digicert here so your info is appreciated.

We can work around the primary domain not matching because our landing page has no real need for SSL, however, we do very much need iPhone support on the subdomains.

Would you happen to know if Digicert Wildcard SSL certs work on the iPhone? Thanks

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by robertss on Sunday February 08, 2009 @06:08PM (#472616)

The DigiCert Wildcard cert does work on the iPhone.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by mishmash on Monday February 09, 2009 @07:55AM (#473370)

Great, thanks.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by brlewis on Tuesday February 03, 2009 @11:14PM (#465246)

Just redirect. When people are typing in a URL manually and by habit add an unnecessary www., they're probably not typing https. I have www.ourdoings.com redirect to ourdoings.com for example.

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by nuclear_eclipse on Tuesday February 03, 2009 @08:50PM (#465125)

Is there any site that covers the topics of wildcard certs in more detail, such as what different wildcards do/don't allow you to do, etc?

I'm personally looking for a wildcard cert to cover my main site, leetcode.net, as well as all of my subdomains (mail.leetcode.net, etc). Is this possible? What cert do I need?

[ Parent | on HN ]

Re:Ask HN: Where should I buy an SSL certificate for my site? by olefoo on Wednesday February 04, 2009 @02:47AM (#465409)

You need two certs:

1. CN=example.com

2. CN=*.example.com

If all you are using the secondary cert for is to provide a TLS signing token you can get away with just a cert for the domain. You have to play some tricks with DNS and hostnames, if you are spreading services between different machines (and it's hokey to do it that way if you want to be a service provider) but it can be made to work.

[ Parent | on HN ]