locked
Win2008R2 IIS7.5 multiple SSL certificates RRS feed

  • Question

  • We have 1 IIS website that has multiple bindings. Is it possible to have multiple SSL certificates on the one IIS website bound to 443.

    e.g. https binding with SSL certificate www.companya.com, another https binding with www.companyb.com certificate and a 3rd https binding with *.company3.com wildcard certificate.

    Thank you


    JK

    Monday, July 14, 2014 3:51 AM

Answers

All replies

  • On Mon, 14 Jul 2014 03:51:00 +0000, J.S.K wrote:

    We have 1 IIS website that has multiple bindings. Is it possible to have multiple SSL certificates on the one IIS website bound to 443.

    IIS questions should be posted to:

    http://forums.iis.net


    Paul Adare - FIM CM MVP
    C makes it easy to shoot yourself in the foot. C++ makes it harder,
    but when you do, it blows away your whole leg. -- B. Stroustrup

    Monday, July 14, 2014 7:47 AM
  • It is possible in IIS 8. Look for Server Name Indication (SNI). In previous versions of IIS it is not possible.

    My weblog: en-us.sysadmins.lv
    PowerShell PKI Module: pspki.codeplex.com
    PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
    Check out new: SSL Certificate Verifier
    Check out new: PowerShell FCIV tool.

    • Proposed as answer by Martin Rublik Monday, July 14, 2014 9:16 AM
    • Marked as answer by Amy Wang_ Thursday, July 24, 2014 3:31 AM
    Monday, July 14, 2014 9:13 AM
  • A simple step-by-step guide is here: http://www.digicert.com/ssl-support/ssl-host-headers-iis-8.htm

    Martin

    • Marked as answer by Amy Wang_ Thursday, July 24, 2014 3:31 AM
    Monday, July 14, 2014 9:16 AM
  • Hi JK,

    Do you need further assistance on this issue by now?

    If yes, please feel free to let us know.

    Have a nice day!

    Amy
    Monday, July 21, 2014 9:50 AM
  • Actually this is not accurate,  you cannot do this without a SAN cert or wildcard Cert.  When you change the Cert in the bindings it will change all the servers using that cert to the new one.  You CANNOT have multiple certs!!!  if there is a way to use multiple certs without using a wildcard or SAN cert please tell us how.  From DigiCert If you use host headers in combination with certificates that can cover more than one website (Wildcard or Multi-Domain (SAN) Certificates) you can secure multiple sites on one IP.
    • Edited by tmac7 Monday, December 10, 2018 7:47 PM
    Monday, December 10, 2018 7:46 PM
  • Sorry tmac7, but as of IIS 8, you're 100% wrong here. The original answer from Vadims that talked about SNI is 100% accurate.

    https://www.sherweb.com/blog/scaling-ssl-with-iis-8-server-name-indication/

    BTW - this question was answered, accurately, 4 years ago.


    • Edited by Paul Adare Tuesday, December 11, 2018 5:55 AM
    Tuesday, December 11, 2018 5:54 AM