ssl - SSL for example.com and www.example.com?

Question

I'm new in installing certificates in IIS 7.5 (Windows Server 2008 R2). I have installed a SSL certificate for my site where the Common Name is example.com. But, if I try to reach the site using www.example.com I get the certificate name mismatch error (http://www.digicert.com/ssl-support/certificate-name-mismatch-error.htm) So, how to fix it ? I mean, one SSL certificate for multiple domains, is it possible ?

Answer 1

除了公用名 (CN) 之外，您还可以在证书中配置别名（称为“主题备用名称”）。您不需要允许太多（任何子站点）的通配符证书：您只需列出您想要的备用名称。

如果您使用的是 OpenSSL，请查看配置手册页

例如（OpenSSL 配置片段）：

...    

[ req ]
default_bits            = 2048
default_keyfile         = privkey.pem
distinguished_name = dn
prompt = no
encrypt_key = no
req_extensions = req_ext

[dn]
C=XX
O=Example
CN=example.org

[req_ext]
subjectAltName = DNS:example.org,DNS:www.example.org

....