[ic] Shared SSL Certificate

Dan Browning interchange-users@icdevgroup.org
Sat May 24 18:39:00 2003


* cfm@maine.com <cfm@maine.com> [2003-05-24 14:27]:
> On Sat, May 24, 2003 at 03:12:45PM -0400, DB wrote:
> > >So maybe I'm confused here.  If I'm not mistaken, a cert is registered
> > >to a particular domain.  So if each webstore is running its own virtual
> > >domain, won't the browser report a security violation, that the ssl cert
> > >in use is registered to a domain other than the one being browsed?
> > >
> > >Josh
> > 
> > No you're correct... each domain needs a separate cert unless you 
> > purchase the much more expensive site certificate. What I'm doing is 
> > running the secure pages from other stores under the domain to which the 
> > cert is issued. Have a look for example at http://MDtoolstore.com but 
> > please don't place any orders as this is a production store... unless 
> > you really want to buy tools that is ;)
> > 
> 
> There's some mistaken information being propagated here.  Sites and
> domains are getting confused.
> 
> There is no such thing as a "much more expensive site certificate"
> that handles multiple domains.

s/domain/hostname/g and then his e-mail would be correct (as I'm sure you
know, CFM).

-Dan