[Noisebridge-discuss] http://forum.nburl.net

Ryan Castellucci ryan.castellucci at gmail.com
Fri Jan 28 00:41:02 PST 2011


(fracking gmail screwing up list replies again)

On Thu, Jan 27, 2011 at 12:13 PM, Andy Isaacson <adi at hexapodia.org> wrote:
> Also, you're aware that getting a SSL cert means that you have to pick
> one name or the other, right?  It sucks that vhosts can't have multiple
> domain names for a single cert, still.

This isn't correct. Certificates with Subject Alternate Names[1] work
on pretty much all browsers[2].  All the hostnames go on the same
certificate and can be hosted on one IP address. StartCom offers
such certs to anyone who's paid the $50 to be identity verified with
them and who can validate domain control for all the domains in
question.

1. https://secure.wikimedia.org/wikipedia/en/wiki/Subject_Alternative_Name
2. http://www.digicert.com/subject-alternative-name-compatibility.htm
-- 
Ryan Castellucci http://ryanc.org/


More information about the Noisebridge-discuss mailing list