SSL Certificate for domain.

[Alexk]

Hi All,

I have certeficate for www.example.com.
How I can install the SAME certificate for example.com?

How I can use extension of RFC3280 (extension 4.2.1.7 Subject Alternative Name, http://tools.ietf.org/html/rfc3280#section-4.2.1.7).

"The subject alternative names extension allows additional identities to be bound to the subject of the certificate. Defined options include an Internet electronic mail address, a DNS name, an IP address, and a uniform resource identifier (URI)."

If I undetstand right - I should add "subjectAltName=DNS:www.domain.com,DNS:domain.com" in openssl config file.

But I have a little question - where I can find openssl config?

Thanks.

 

[nobaloney]

Nope, once a certificate has been issued you can only use it for the specific common name for which it's been issued, in your case, www.example.com.

You can create your own certificate that will work for both (please don't ask me how), but then of course unless your root certificate is included in the browsers your site visitors use, visitors will al get an Untrusted Certificate error.

You can buy Wildcard certificates that can be used for this purpose from man vendors; they're much more expensive than single-common-name certificates:

$429.95 PositiveSSL
$199.00 RapidSSL
$995.00 GeoTrust
$799.00 Thawte

Note that they're generally not cheap, and contrary to what many people believe, they only work for multiple subdomains of one domain; you cannot use them to secure all sites on your server.

We offer the PositiveSSL Certificate to DirectAdmin users for the same price as the RapidSSL Certificate; contact me (email is best; see below for my email address) for special (even lower) reseller pricing if you qualify.

Jeff