Two different Wildcard Certificates for different pages of the same website

Question

Can anyone tell me if I have an wildcard certificate for my domain but if I want to purchase another wildcard for my different webpage (Career page) then the previous wildcard would be revoked? or is it possible to have 2 different wildcard certificate for different pages of the same website?

Its urgent if some one can guide me

Answer 1

bobbyiliev May 6, 2021

Hi there,

The main Wildcard SSL certificate should not be revoked, but you will need to create a separate Apache virtual host or Nginx server block for the new website in order to be able to install a separate SSL certificate.

Also, note that you can not install SSL certificates for specific pages like yourdomain.com/contact or yourdomain.com/about but rather for subdomain names like shop.yourdomain.com or blog.yourdomain.com and etc.

Hope that this helps.
Regards,
Bobby

Reply Report

sidrasiddique539 May 6, 2021

Hi,

thank you for your reply.

But just let say we have *.example.com, now we need a separate SSL certificate for abc.example.com.(career page) only for one subdomain.
So, Is it possible? *.example.com which is a wildcard certificate so that would be revoked or not?

Or one more thing if we get a new certificate from LetsEncrypt will they share the certificate in .PEM format?

Thank you.
Reply Report
- bobbyiliev May 7, 2021
  
  Hi there,
  
  What I would usually do in this case is to create a separate Apache Virtual host for abc.example.com. And then install the certificate.
  
  That way as the abc.example.com and the *.example.com have separate virtual hosts, the SSL certificates would not be in a conflict and the .pem files will also be separate.
  
  As a side note, as the *.example.com also covers abc.example.com you could also use that certificate to secure the abc subdomain name.
  
  Regards,
  Bobby
  
  Reply Report
  
  sidrasiddique539 May 7, 2021
  
  Hi,
  
  Yes I can use this for abc.example.com but the problem is. we want to host our career page to third party like (jobdiva) and they are asking for Intermediate CA, Private Key, Security certificate but I don’t want to share my SSL of *.example.com that’s why I want an SSL for Subdomain. One more thing Can someone guide me how to get free SSL certificate for subdomain?
  
  Reply Report
  
  bobbyiliev May 9, 2021
  
  Hi there,
  
  What you could do is use Let’s Encrypt and follow the steps here on how to get a free SSL certificate:
  
  https://www.digitalocean.com/community/tutorials/how-to-acquire-a-let-s-encrypt-certificate-using-dns-validation-with-certbot-dns-digitalocean-on-ubuntu-20-04
  
  However keep in mind that the free Let’s Encrypt SSL certificates are only valid for 90 days, so this would mean that you would need to renew the certificate and send it over to the third-party provider every 3 months or so.
  
  Hope that this helps.
  Regards,
  Bobby
  
  How To Acquire a Let's Encrypt Certificate Using DNS Validation with certbot-dns-digitalocean on Ubuntu 20.04
  by Jamie Scaife
  DNS validation allows for certificate issuance requests to be verified using DNS records, rather than by serving content over HTTP. In this tutorial, you will use the certbot-dns-digitalocean hook for Certbot to issue a Let's Encrypt certificate using DNS validation via the DigitalOcean API.
  
  Reply Report
  
  sidrasiddique539 May 10, 2021
  
  Thank you soo much for your help but one more thing can you please share the tutorial of DNS validation.
  I am new in this field and dont have any idea about the procedure can you please guide me?
  
  Reply Report
  
  bobbyiliev May 10, 2021
  
  Hi there @sidrasiddique539,
  
  Once you add the DNS records you could use the following tool to verify that the records are in place:
  
  https://www.digitalocean.com/community/tools/dns
  
  Also not that after each DNS change it could take up to a few hours for the DNS to propagate over the Globe before you could see the new changes.
  
  Let me know how it goes!
  Regards,
  Bobby
  
  Reply Report

Answer 2

sidrasiddique539 May 6, 2021

Hi,

thank you for your reply.

But just let say we have *.example.com, now we need a separate SSL certificate for abc.example.com.(career page) only for one subdomain.
So, Is it possible? *.example.com which is a wildcard certificate so that would be revoked or not?

Or one more thing if we get a new certificate from LetsEncrypt will they share the certificate in .PEM format?

Thank you.
Reply Report
- bobbyiliev May 7, 2021
  
  Hi there,
  
  What I would usually do in this case is to create a separate Apache Virtual host for abc.example.com. And then install the certificate.
  
  That way as the abc.example.com and the *.example.com have separate virtual hosts, the SSL certificates would not be in a conflict and the .pem files will also be separate.
  
  As a side note, as the *.example.com also covers abc.example.com you could also use that certificate to secure the abc subdomain name.
  
  Regards,
  Bobby
  
  Reply Report
  
  sidrasiddique539 May 7, 2021
  
  Hi,
  
  Yes I can use this for abc.example.com but the problem is. we want to host our career page to third party like (jobdiva) and they are asking for Intermediate CA, Private Key, Security certificate but I don’t want to share my SSL of *.example.com that’s why I want an SSL for Subdomain. One more thing Can someone guide me how to get free SSL certificate for subdomain?
  
  Reply Report
  
  bobbyiliev May 9, 2021
  
  Hi there,
  
  What you could do is use Let’s Encrypt and follow the steps here on how to get a free SSL certificate:
  
  https://www.digitalocean.com/community/tutorials/how-to-acquire-a-let-s-encrypt-certificate-using-dns-validation-with-certbot-dns-digitalocean-on-ubuntu-20-04
  
  However keep in mind that the free Let’s Encrypt SSL certificates are only valid for 90 days, so this would mean that you would need to renew the certificate and send it over to the third-party provider every 3 months or so.
  
  Hope that this helps.
  Regards,
  Bobby
  
  How To Acquire a Let's Encrypt Certificate Using DNS Validation with certbot-dns-digitalocean on Ubuntu 20.04
  by Jamie Scaife
  DNS validation allows for certificate issuance requests to be verified using DNS records, rather than by serving content over HTTP. In this tutorial, you will use the certbot-dns-digitalocean hook for Certbot to issue a Let's Encrypt certificate using DNS validation via the DigitalOcean API.
  
  Reply Report
  
  sidrasiddique539 May 10, 2021
  
  Thank you soo much for your help but one more thing can you please share the tutorial of DNS validation.
  I am new in this field and dont have any idea about the procedure can you please guide me?
  
  Reply Report
  
  bobbyiliev May 10, 2021
  
  Hi there @sidrasiddique539,
  
  Once you add the DNS records you could use the following tool to verify that the records are in place:
  
  https://www.digitalocean.com/community/tools/dns
  
  Also not that after each DNS change it could take up to a few hours for the DNS to propagate over the Globe before you could see the new changes.
  
  Let me know how it goes!
  Regards,
  Bobby
  
  Reply Report

Related

Question

Two different Wildcard Certificates for different pages of the same website

Related

Leave a comment

Looking for something else?

Sign up for our newsletter

Related

Question

Two different Wildcard Certificates for different pages of the same website

Related

Leave a comment

Related

question

How to set up Ubuntu 16.04 server with QooQee Muse Home Server Hosted Blog?

question

SSH blocked for all droplet's only on my region.

question

DDoS Protection

question

configuring email on two servers

Looking for something else?