How to assign two different certificate for two IIS website
Context
I have two different web sites on IIS (Win Server 2016) both listening on 80 and 443 and in the bindings I separate them with host name:
one is blog.mydomain.com in the other I left the host name binding empty, to allow both mydomain.com and www.mydomain.com server by that site. I also set for both 443 to a self signed certificate and all worked perfectly
- I could reach one site on mydomain.com or www.mydomain.com both http
and https - I could reach the other site on blog.mydomain.com http and
https
Issue
When the time of greening the browser address line come, I bought a Commodo certificate (not the wildcard) for blog.mydomain.com. I installed it successfully and blog.mydomain.com is trusted green now...
However when I change the bindings for the site of blog.mydomain.com to use the Commodo certificate instead of the selfissued, the other site's binding also change (IIS manager give me a message, see picture in the end of the post)
This forecast the issue, I can not buy an other Commodo (not wildcard) certificate for www.mydomain.com (includes mydomain.com) because I will not able to configure the two sites for two certificate.
Question
I know the professional solution would be to buy a wildcard certificate, but it is 10 times expensive than a not wildcard, so I thought I can accomplish the task with two different not wildcard certificate.
Am I missing something? What is the issue here, are the two certificate too similar?
certificate iis
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
add a comment |
Context
I have two different web sites on IIS (Win Server 2016) both listening on 80 and 443 and in the bindings I separate them with host name:
one is blog.mydomain.com in the other I left the host name binding empty, to allow both mydomain.com and www.mydomain.com server by that site. I also set for both 443 to a self signed certificate and all worked perfectly
- I could reach one site on mydomain.com or www.mydomain.com both http
and https - I could reach the other site on blog.mydomain.com http and
https
Issue
When the time of greening the browser address line come, I bought a Commodo certificate (not the wildcard) for blog.mydomain.com. I installed it successfully and blog.mydomain.com is trusted green now...
However when I change the bindings for the site of blog.mydomain.com to use the Commodo certificate instead of the selfissued, the other site's binding also change (IIS manager give me a message, see picture in the end of the post)
This forecast the issue, I can not buy an other Commodo (not wildcard) certificate for www.mydomain.com (includes mydomain.com) because I will not able to configure the two sites for two certificate.
Question
I know the professional solution would be to buy a wildcard certificate, but it is 10 times expensive than a not wildcard, so I thought I can accomplish the task with two different not wildcard certificate.
Am I missing something? What is the issue here, are the two certificate too similar?
certificate iis
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
1
Have you gotRequire Server Name Indicationchecked on both sites?
– mt025
Jan 21 at 19:58
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09
add a comment |
Context
I have two different web sites on IIS (Win Server 2016) both listening on 80 and 443 and in the bindings I separate them with host name:
one is blog.mydomain.com in the other I left the host name binding empty, to allow both mydomain.com and www.mydomain.com server by that site. I also set for both 443 to a self signed certificate and all worked perfectly
- I could reach one site on mydomain.com or www.mydomain.com both http
and https - I could reach the other site on blog.mydomain.com http and
https
Issue
When the time of greening the browser address line come, I bought a Commodo certificate (not the wildcard) for blog.mydomain.com. I installed it successfully and blog.mydomain.com is trusted green now...
However when I change the bindings for the site of blog.mydomain.com to use the Commodo certificate instead of the selfissued, the other site's binding also change (IIS manager give me a message, see picture in the end of the post)
This forecast the issue, I can not buy an other Commodo (not wildcard) certificate for www.mydomain.com (includes mydomain.com) because I will not able to configure the two sites for two certificate.
Question
I know the professional solution would be to buy a wildcard certificate, but it is 10 times expensive than a not wildcard, so I thought I can accomplish the task with two different not wildcard certificate.
Am I missing something? What is the issue here, are the two certificate too similar?
certificate iis
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
Context
I have two different web sites on IIS (Win Server 2016) both listening on 80 and 443 and in the bindings I separate them with host name:
one is blog.mydomain.com in the other I left the host name binding empty, to allow both mydomain.com and www.mydomain.com server by that site. I also set for both 443 to a self signed certificate and all worked perfectly
- I could reach one site on mydomain.com or www.mydomain.com both http
and https - I could reach the other site on blog.mydomain.com http and
https
Issue
When the time of greening the browser address line come, I bought a Commodo certificate (not the wildcard) for blog.mydomain.com. I installed it successfully and blog.mydomain.com is trusted green now...
However when I change the bindings for the site of blog.mydomain.com to use the Commodo certificate instead of the selfissued, the other site's binding also change (IIS manager give me a message, see picture in the end of the post)
This forecast the issue, I can not buy an other Commodo (not wildcard) certificate for www.mydomain.com (includes mydomain.com) because I will not able to configure the two sites for two certificate.
Question
I know the professional solution would be to buy a wildcard certificate, but it is 10 times expensive than a not wildcard, so I thought I can accomplish the task with two different not wildcard certificate.
Am I missing something? What is the issue here, are the two certificate too similar?
certificate iis
certificate iis
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
asked Jan 21 at 15:09
g.pickardoug.pickardou
145212
145212
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
1
Have you gotRequire Server Name Indicationchecked on both sites?
– mt025
Jan 21 at 19:58
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09
add a comment |
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
1
Have you gotRequire Server Name Indicationchecked on both sites?
– mt025
Jan 21 at 19:58
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
1
1
Have you got
Require Server Name Indication checked on both sites?– mt025
Jan 21 at 19:58
Have you got
Require Server Name Indication checked on both sites?– mt025
Jan 21 at 19:58
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396657%2fhow-to-assign-two-different-certificate-for-two-iis-website%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1396657%2fhow-to-assign-two-different-certificate-for-two-iis-website%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Forgot to attach the picture?
– mt025
Jan 21 at 19:49
1
Have you got
Require Server Name Indicationchecked on both sites?– mt025
Jan 21 at 19:58
No, I have not checked "Require Server Name Indication". Should I?
– g.pickardou
Jan 22 at 6:03
@mt025: Thanks for asking. Now I tried, and for blog.mydomain.com I checked, then for the other site (where the binding have empty hostname) I can not, but setting here to the other certificate it works now. Thanks. In case you post it as an answer I can mark it.
– g.pickardou
Jan 22 at 6:09