question about SSL and Ablecommerce stores

[alkasber]

Hi,

Is it possible to have 10 unique AC7 stores with a single SSL certificate? (1 IP) Or each AC7 store with SSL must have a unique IP?

Thanks

[AbleMods]

Yes, it's called a wildcard cert. It's required if hosting multiple SSL sites on the same single IP address. Otherwise standard certs require separate static IP for each individual cert.

Has nothing to do with AC7 - the web site being hosted is irrelevant. All the SSL setting in AC7 does is decide whether to force HTTPS instead of HTTP on secured pages.

[alkasber]

Yes, it's called a wildcard cert.

I though Wildcard SSL was meant to work only with subdomains, like http://www.domain1.com, mail.domain1.com, etc.domain1.com and not for full domains, like http://www.store1.com, http://www.store2.com. Or not?



Thanks

[afm]

Right. Wildcard certs are for multiple subdomains (http://www.domain.com, mail.domain.com, etc). I think Joe was thinking you would have store1.domain.com, store2.domain.com.

For store1.com, store2.com, etc; you need separate normal certs.

For store1.domain.com, store2.domain.com, etc; you need separate normal certs or 1 wildcard cert (*.domain.com).

For domain.com/store1, domain.com/store2, etc; you need 1 normal cert (domain.com).

[AbleMods]

10 unique AC7 stores with a single SSL certificate? (1 IP)

Yeah I assumed www on each storefront based on the original question of can it be done with a single IP.

Was going to do just that with Solunar.com and AbleMods.com until I saw the price of the wildcard cert

[alkasber]

For store1.com, store2.com, etc; you need separate normal certs.

But can I have multiple normal SSL certs on a single IP?

Anyway I found a solution, talked with Kyle at Digicert and he told me about their SANS UCC Certificate, that can be used up to 150 domains with a single certificate/IP.

Thanks!

[afm]

From the Digicert wildcard page,

"SSL Virtual Hosting on one IP. IIS 6 and Apache are both able to use a wildcard certificate to serve multiple secure sites from a single IP address."

I have not heard of UCC/SAN certs before. Thank you for the tip.