Home / server / Questions / 426172
Accepted
liamTc
Asked: 2012-09-11 16:12:12 +0800 CST

Are SSL certificates fixed to IP's within a region?

  • 772

I need to purchase a wildcard ssl certificate.

I am looking at purchasing it from Comodo, however when I go to purchase it there is a question asking to "select the region that you are located in". Here is the link.

I am not sure exactly why this question is asked but I am wondering if these certificates are fixed to servers hosted within the specified regions?

I am hosting on Amazon EC2 and will be hosting servers in multiple regions therefore I don't really want to be purchasing certificates for each region.

I have asked support this exact question but they will not give me a straight answer which doesn't make me very comfortable with going ahead and purchasing the certificate.

amazon-ec2

3 Answers

  1. Best Answer

    SSL certificates are not based on region, neither are they linked to specific IPs. You can use them wherever you want.

    However, you could be facing a third party that will ask you to buy in your currency (i.e: check their conversion rate between euro and $USD. It's... interesting).

    Your CSR/CRT will have to declare your country, through the "SUBJECT: C=" part of the certificate, but this could be setted to whatever you want - and want your customer to see. For more info see X.509 specs on wikipedia.

    • 4

  2. As far as I've ever known, SSL certificates are not restricted to use on specific IP addresses or blocks of addresses. Most likely Comodo is asking for your region for some billing purpose (e.g. if you live in Europe they may have to do some EU-specific billing). In fact, I can see that by changing the region, they change the currency in which your price is quoted (e.g. dollars for the US, pounds for the UK, euros for the EU, etc.).

    • 3

  3. The information that they require its only for determinate where the buyer is and all, its only security porpouses... Ive got a couple of them and in each they ask you where you are from, actually at a SSL certificate you need to indicate the country by the letters of identity (USA, MEX, etc..).

    The SSL certificate will work for anyone who enter at your side from any part of the world (unless you restrict the access to your web and all..)

    • 1