News for hackers. Stuff that matters.

A comment on Ask HN: Where should I buy an SSL certificate for my site?. Parent comment

Re:Ask HN: Where should I buy an SSL certificate for my site? by nuclear_eclipse on Tuesday February 03, 2009 @08:50PM (#465125)
Is there any site that covers the topics of wildcard certs in more detail, such as what different wildcards do/don't allow you to do, etc?

I'm personally looking for a wildcard cert to cover my main site, leetcode.net, as well as all of my subdomains (mail.leetcode.net, etc). Is this possible? What cert do I need?

[ Parent | on HN ]
Re:Ask HN: Where should I buy an SSL certificate for my site? by olefoo on Wednesday February 04, 2009 @02:47AM (#465409)
You need two certs:

1. CN=example.com

2. CN=*.example.com

If all you are using the secondary cert for is to provide a TLS signing token you can get away with just a cert for the domain. You have to play some tricks with DNS and hostnames, if you are spreading services between different machines (and it's hokey to do it that way if you want to be a service provider) but it can be made to work.

[ Parent | on HN ]