I am in the process of enabling HTTPS on my web sites. I have a web site, let's call it
example.com, which is available both with and without a
I can now:
- request one SSL certificate for
example.comand another one for
- request a single SSL certificate for
example.comwith a SAN for
I am aware that, from a security point-of-view, both solutions are fine (which is why I ask this question here instead of at security.stackexchange.com). Certificate renewal will be automated and the certificates themselves are free of charge (using Let's Encrypt).
Is there any reason to prefer one option over the other?