Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a need for multiple subdomains to have a SSL certificate.

For instance, the following where the subsite number and subsubsite number could go for ever.

  • subsite1.sites.example.com
  • subsubsite1.subsite1.sites.example.com
  • subsubsite2.subsite1.sites.example.com
  • subsubsite3.subsite1.sites.example.com
  • subsite2.sites.example.com
  • subsite3.sites.example.com

Without creating a separate certificate for each subsite, how can this be implemented?

share|improve this question
Buy wildcard SSL certificate for parent domain. That should work for all sub-domains. – Nikhil Supekar Jan 23 '15 at 3:32
@NikhilSupekar I have done so, but it only works for one level (i.e. example.com and subsite1.example.com, subsite2.example.com, ...) – user1032531 Jan 23 '15 at 3:43
ohh!! I had never tried that. In that case, for above example, you can buy a separate SSL for example.com and wildcard SSL for *.sites.example.com and *.subsite1.sites.example.com, so 2 wildcards and 1 normal SSL certificate should be enough. – Nikhil Supekar Jan 23 '15 at 5:26
I'd question why you need so many levels of subdomains, and whether can be brought up to a single subdomain level. Moving to a directory-based structure on a single subdomain could actually be more friendly SEO & usability. – Andrew Lott Jan 23 '15 at 11:13

I hear that you can use a UCC certificate for multiple hostnames on multiple domains, but I haven't found anyone that will issue one with wildcards (I'd love to be proven wrong on that).

Each wildcard certificate can only be used for one level of subdomains. You will have to purchase another wildcard certificate for each subdomain where you want subsubdomains.

I have the same problem, so I feel for you.

See also:
Problems with SSL and multi level subdomains
Wildcard SSL certificate for second-level subdomain
Wildcard SSL Certificate registration with multi-level subdomains

Those questions probably belong here, but I don't think this site existed back when those questions were first asked.

share|improve this answer
Thanks James. Bummer! Could I purchase *.sites.example.com with addition level *.*.sites.example.com? – user1032531 Jan 23 '15 at 4:25
I'm pretty sure you can buy *.sites.example.com and *.subsite1.sites.example.com, but I've never done so, so I'm not sure how the ownership validation would work given that there isn't a Whois record for the subdomain. – James Jan 23 '15 at 4:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.