Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

My company's development team is in process of developing two sites that will have two separate domain names (let's say foo.com and bar.com), but will be hosted on a single cloud Linux/Apache server.

Do we need to purchase SSL certificates for each domain (one for foo.com and one for bar.com), or do we just need one for the server? And are there any specific security concerns that need to be taken in to account when using SSL in this environment?

share|improve this question
    
Just saw this question - webmasters.stackexchange.com/questions/47639/… - which is helpful but I'm interested in the specific requirements of multi-domain/single server environments (if there are differences). –  Willl Jul 31 '13 at 15:01
add comment

2 Answers 2

up vote 1 down vote accepted

If you want to provide HTTPS connections to both domains, you'll need a separate SSL certificate for each one. If you try to use just one for the server, visitors will receive a domain mismatch security error in their browser.

Each SSL will require a separate IP address, as standard SSL certificates are assigned to one domain and one IP address. If you've only been assigned one IP address for your account, you'll have to request another (non-shared) IP address from your web hosting company or ISP.

SSL certificates only secure the connection between your web server and client browsers, so you'll need to employ good security practices on your server if you'll be storing sensitive data. How to do so, and whether cloud-based web hosting is secure, is out of the scope for this question, but a worthwhile consideration in that case.

share|improve this answer
add comment

Adding an additional SAN certificate (Subject Alternative Name) with SSL Certificate purchase, can secure multiple domains on single server.

If you want to secure two domains on single server, then you should buy a 1 certificate with adding a 1 SAN certificate during purchase.

Below table shows the number of domains on single server with requirement of SSL Certificates:

             2 domains = 1 Certificate + 1 SAN

             3 domains = 1 certificate + 2 SANs

                       :           :

                       :           : 

             N domains = 1 Certificate + (n-1) SANs

Generally, Major certificate Authorities allows you to add additional SAN up to 24. It may vary by Certificate Authority.

Selection of Certificate:

There are three types of SSL Certificates DV (domain validated), OV (organization validated) and EV (extended validation) certificates. You should buy OV or EV certificate, because it has better SAN option then the DV certificate.

share|improve this answer
    
Is this really a cost effective option for just two domains, as compared to two standard SSL's? Please do not post links with affiliate ID's (first link) or to promote your own website (second link). –  dan Aug 1 '13 at 8:25
    
First link is not an affiliate. Please, check it out. It is a normal link. In 2nd, I just given an example to add more clarification. If, people don't like it, then just inform me. I will remove it. –  Kalpesh Patel Aug 1 '13 at 8:28
    
First link has in it: ?fid=ssl-certificates and second link is to the link in your bio. Self-promotion is not allowed in posts, and usually considered as spam. –  dan Aug 1 '13 at 8:31
    
check, i have removed. Just navigate Symantec website for more clarification of first link, that was not affiliated. –  Kalpesh Patel Aug 1 '13 at 8:32
    
...price is $698 from direct certificate authority and $588 from third party reseller followed by a link to your website as that "Third party reseller". Please review the FAQ's for this site. –  dan Aug 1 '13 at 8:48
show 9 more comments

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.