How to install a single SSL certificate for www and non-www

iis iis-7 ssl ssl-certificate

10,551

Solution 1

If you have purchase a standard, single domain SSL certificate, then it will be for one domain, so you can only use it for domainname.com or www.domainname.com.

If you have purchased a wildcard or UCC certificate then it will allow either unlimited subdomains (in the case of a wildcard) or mulitple domains up to a certain number (in the case of UCC).

Solution 2

It depends on how you have IIS configured. If you are certain the cert has both example.com and www.example.com in the SN and/or SAN then it will work for both, simple configure it in the bindings for the site(s). If you don't know how to configure the cert in the bindings section of IIS, then that's a wholely different problem.

10,551

vikp

Updated on September 17, 2022

Comments

vikp over 1 year

I have purchased an SSL certificate and I should be able to configure IIS 7 to use that certificate for both https://domainname and https://www.domainname

I have looked online but didn't find a solution so far. Is this possible to do? According to the company that issues SSL, a single SSL can be used in both cases.

Thank you
- Admin over 13 years
  
  Those should be slashes (/) rather than backslashes (\).
- Admin over 13 years
  
  @Dennis - then jump in and fix it ;)
- Admin over 13 years
  
  @Mark: I often do ;)
- Admin over 13 years
  
  @Dennis - I know, sorry, it was a bit tongue in cheek
- Admin over 13 years
  
  @Mark: I saw the ;) wink.
Philip over 13 years

Don't know if it's the case here, but many CAs will issue a cert for both example.com and www.example.com even when you request just one or the other.
vikp over 13 years

Hi, thank you for the reply. Yes, I have been looking at bindings, but IIS7 does not allow me to use the same certificate for two different domain names.
Philip over 13 years

Can you be more specific as to how it is not allowing you to set the binding?
MrGigu over 13 years

Worth mentioning that a wildcard certificate that covers *.example.com will not cover example.com (but will cover www.example.com) in some browsers
Sam Cogan over 13 years

True, and yes I should have mentioned that, some CAs will issue both in either 2 certs or a single UCC one.
Shai over 9 years

Yes, that strategy works most of the time. However, it doesn't work if the user types in or has a bookmark for: website.com. The browser will display the security warning before the redirect occurs.
Alex Under almost 9 years

You cannot redirect one domain to another if it comes from the https protocol because first of all it checks if the certificate is valid, hence if there is no certificate for www.example.com - it will fail the check and the actual redirect (on server level) will not take place.