Home / server / Questions / 66485
Accepted
MikeN
Asked: 2009-09-18 14:28:57 +0800 CST

Can you get an Extended Validation SSL certificate that applies to unlimited subdomains?

  • 772

Can you get an Extended Validation SSL certificate that applies to unlimited subdomains? Does it make technical sense? I'm using Digicert and they said that it wasn't possible to offer such a product.

ssl

2 Answers

  1. Best Answer

    Zoredache is correct. The EV Guidelines do not allow CAs to issue wildcard EV certificates. It does allow them to add multiple SAN names that can cover different subdomains or different domains and some providers are offering products that take advantage of this, but they are not wildcard certificates, just UC or SAN certificates.

    So it is possible to cover "multiple" subdomains with an EV certificate but not "unlimited" subdomains.

    • 10

  2. The guidelines seem to explicitly forbid usages of wildcards in EV certs.

    http://cabforum.org/EV_Certificate_Guidelines_V11.pdf

    Certificate Field subject:commonName (OID 2.5.4.3) or SubjectAlternativeName:dNSName Required/Optional Required Contents This field MUST contain one or more host domain name(s) owned or controlled by the Subject and to be associated with Subject’s server. Such server MAY be owned and operated by the Subject or another entity (e.g., a hosting service). Wildcard certificates are not allowed for EV certificates.

    • 4