Sign up ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I have a need for multiple subdomains to have a SSL certificate.

For instance, the following where the subsite number and subsubsite number could go for ever.


Without creating a separate certificate for each subsite, how can this be implemented?

share|improve this question
Buy wildcard SSL certificate for parent domain. That should work for all sub-domains. – Nikhil Supekar Jan 23 at 3:32
@NikhilSupekar I have done so, but it only works for one level (i.e. and,, ...) – user1032531 Jan 23 at 3:43
ohh!! I had never tried that. In that case, for above example, you can buy a separate SSL for and wildcard SSL for * and *, so 2 wildcards and 1 normal SSL certificate should be enough. – Nikhil Supekar Jan 23 at 5:26
I'd question why you need so many levels of subdomains, and whether can be brought up to a single subdomain level. Moving to a directory-based structure on a single subdomain could actually be more friendly SEO & usability. – Andrew Lott Jan 23 at 11:13

1 Answer 1

I hear that you can use a UCC certificate for multiple hostnames on multiple domains, but I haven't found anyone that will issue one with wildcards (I'd love to be proven wrong on that).

Each wildcard certificate can only be used for one level of subdomains. You will have to purchase another wildcard certificate for each subdomain where you want subsubdomains.

I have the same problem, so I feel for you.

See also:
Problems with SSL and multi level subdomains
Wildcard SSL certificate for second-level subdomain
Wildcard SSL Certificate registration with multi-level subdomains

Those questions probably belong here, but I don't think this site existed back when those questions were first asked.

share|improve this answer
Thanks James. Bummer! Could I purchase * with addition level *.* – user1032531 Jan 23 at 4:25
I'm pretty sure you can buy * and *, but I've never done so, so I'm not sure how the ownership validation would work given that there isn't a Whois record for the subdomain. – James Jan 23 at 4:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.