2

Does having an SSL certificate issued for each subdomain rank the same as having one SAN SSL certificate grouping all of them?

Example:

First scenario:

example.com -> has it's own SSL certificate

sub.example.com -> has it's own SSL certificate

Second scenario:

example.com -> has a SAN SSL certificate with sub.example.com included

sub.example.com -> is included in example.com SAN SSL certificate

Similar questions discuss the necessity or convenience from a practical standpoint. I'm particularly interested in knowing it's SEO consecuences if any, mainly for the Google Search Engine, and do not care of prior-2003 browser support of SAN. I found searching for this specific question hard because it's keywords are far too common, I hope it's not a duplicate.

0

Google doesn't care which type of SSL certificate you get. As long as the certificate works, Google gives you a very slight ranking boost for HTTPS. The certificate type doesn't matter, Google doesn't give better boosts for better certificates.

As far as coverage goes you can have any of the following. Googlebot can crawl sites protected by any of the following:

  • Single site certificate
  • Subject alternative name (SAN) certificates that cover multiple sites
  • Wildcard certificates that cover a site and all subdomains

There are also various levels of SSL certificate:

  • Domain Validation (DV) - Verification has been done that you are in control over the domain. This is the cheapest and easiest certificate to get. Free LetsEncrypt certificates fall into this category.
  • Organization Validation (OV) - Verifies the documents associated with your business before issuing a certificate.
  • Extended Validation (EV) - Verifies your organization, its address, and its contact information.

In my experience, the type of certificate doesn't matter for SEO. I use domain validated SAN certificates for my own sites and I have no ranking problems associated with them. I see plenty of HTTPS sites ranking in Google that use SAN certificates.

Google's John Mueller said that for now, certificate type doesn't matter:

From our point of view if you implement HTTPS properly then that's fine for us. It's not something where we'd say this specific certificate is good but the other one is bad. I imagine maybe in the long run we'll be able to differentiate it a little bit more, but at the moment it's really just either: it works or it doesn't work.

Even if Google does start differentiating between certificate types it is more likely to differentiate between DV/OV/EV rather than between SAN/Wildcard/Stand alone.

1

If you will purchase separate single domain SSL certificate for each domain or if you will purchase SAN SSL for multiple domains (which you have already described in your scenario) will not affect badly in SEO ranking. So go for any either single domain SSL or SAN SSL, which is convenient for you.

SAN (Multi Domain) SSL saves your time and money on certificate management compared to single domain ssl. And if you required to secure main domain and its all first level of subdomains like below listed then you should go for wildcard ssl.

  1. example.com
  2. blog.example.com
  3. login.example.com
  • You could as well "buy" (or get free from Let's Encrypt) the wildcard *.example.com, in addition to the name example.com (since it will not be covered by the wildcard) – Patrick Mevzek Aug 30 '18 at 14:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.