Get your server issues fixed by our experts for a price starting at just 25 USD/Hour. Click here to register and open a ticket with us now!

Author Topic: What is a Wildcard SSL certificate?  (Read 2856 times)

0 Members and 1 Guest are viewing this topic.

shijuc

  • Guest
What is a Wildcard SSL certificate?
« on: January 25, 2014, 12:24:56 pm »
What is a Wildcard SSL certificate?

What is a Wildcard SSL certificate?
A Wildcard SSL certificate secures your website URL, and an unlimited number of its subdomains. A single Wildcard certificate can secure both http://www.cpanelkb.net, cpanelkb.net,sub.cpanelkb.net,etc.,

Wildcard certificates secure websites the same as a regular SSL certificate, and requests are processed using the same validation methods. However, some Web servers might require a unique IP address for each subdomain on the Wildcard certificate.

Install Wildcard SSL Certificate on your cpanel server
1) Generate the Certificate Signing Request (CSR) in WHM >> SSL/TLS >>
Generate an SSL Certificate and Signing Request and make sure you enter the host as *.domain.com

Use this SSL certificate country code

2) Purchase the wildcard certificate using the CSR you generated from SSL provider like godaddy, rapitssl,etc.,

3) Once you got SSL certificate , Click WHM >> SSL/TLS »
Install an SSL Certificate and Setup the Domain and paste in the CRT.

Verify that the correct account is loaded by comparing the username.

Remove the “*.” from the domain name and use domain.com only.
Check the IP Address into the IP Address field.

You are now ready to press “Submit“.

Thats all… SSL install will successfully!!!

In order to install wildcard SSL certificate for your Sub domain, use the same certificate to install subdomain.( you won’t create CSR again)

Use the same method to install SSL certificate for your single domain and it should be need dedicated IP address.

For your reference, the following code will automatically added in your httpd.conf.

SSLEngine on

SSLCertificateFile /etc/ssl/certs/cpanelkb.net.crt
SSLCertificateKeyFile /etc/ssl/private/cpanelkb.net.key
SSLCACertificateFile /etc/ssl/certs/cpanelkb.net.cabundle
CustomLog /usr/local/apache/domlogs/cpanelkb.net-ssl_log combined
SetEnvIf User-Agent “.*MSIE.*” nokeepalive ssl-unclean-shutdown
<Directory “/home/user/public_html/cgi-bin”>
SSLOptions +StdEnvVars
</Directory>