Assume I have a website that offers a web-based service to companies:
Each company has a subdomain wildcarded via mod_rewrite:
(This is typical of many companies e.g. Wufoo)
My site has a wildcard SSL certificate for *.myservice.com, allowing clients to connect to their account securely.
As an option, clients can re-point their domain name to my website by changing the A record:
www.client1.com > client1.myservice.com
(as is possible at Tumblr)
Is it possible to still offer SSL security on the forwarding domain, so that www.client1.com (pointing to client1.myservice.com) is secured over HTTPS? Either by:
- Extending my certificate to cover the clients' domain
- Somehow allowing the client to upload a certificate to be hosted on my server
- Any other method?
I've done some work with SSL certificates in the past and don't think this is possible. Can anyone prove me wrong?