ssl certificate from different providers for main domain and its sub domain

hruday · 07-14-2016, 02:48 AM

I am using Cent OS 7 server with apache 2.4.6.

I need to enable https for www.mysite.com and also for one of its subdomain xyz.mysite.com

Now If i purchase ssl certificate from a service provider (eg: godaddy), can i purchase ssl for xyz.mysite.com from other service provider (eg: comodo)

Is it possible to use ssl in the above method?

Habitual · 07-14-2016, 06:03 AM

Yes, it should be possible.

Wildcard cert mean anything to you?

hruday · 07-14-2016, 10:25 AM

Quote:

Originally Posted by Habitual

Yes, it should be possible.

Wildcard cert mean anything to you?

Here I am mentioning purchasing from two service providers.

Is it possible?

Yes, Wildcard does it for multiple subdomains only if i purchase from same provider.

Ellendhel · 07-14-2016, 10:40 AM

Quote:

Originally Posted by hruday

Here I am mentioning purchasing from two service providers.

Is it possible?

It should, each certificate will cover only one host by default. The fact that the certificates comes from one vendor or another doesn't change anything.

Habitual · 07-14-2016, 01:07 PM

You can buy whatever makes you happy. From any vendor.

TenTenths · 07-15-2016, 08:43 AM

Options are:
2 x single certs for each sub-domain(www and xyz)
1 x wildcard cert for the domain *.domain.com
1 x multi-domain cert with www.domain.com and xyz.domain.com
2 x free certs from letsencrypt.org

As for mixing and matching, all highly possible. At work we have a standard cert for certain things and a EV cert for the main transacting site.

sundialsvcs · 07-15-2016, 06:03 PM

... However, I am of the opinion that you always should be "consistent." If foobar.mydomain.com is purportedly secured by an entirely-different certificate from bletch.mydomain.com, then my suspicions would immediately be raised.

jpollard · 07-28-2016, 08:13 PM

If you have a number of such subdomains, you might look into getting your own signing certificate. Then you use that to create and sign server certificates as often as you want. This is both consistent, and may be cheaper than paying for multiple certificates from various vendors. It also gives YOU control over your server.