Hacker News Reader

Comment by johne20 | Hacker News Reader

I used to go the multiple subdomain approach until I discovered some wildcard SSL certificates do not support more than one level of subdomains. Therefore, I now do something like staging-nyc.example.com

View on HN

All wildcard SSL certs only support one level of subdomain.

You can use a SAN cert to create a multi-level wildcard cert. The cert would be issued for:

    example.com, *.example.com, *.*.example.com, *.*.*.example.com [...]

That's technically possible, but you'll have a very hard time finding a CA that's willing to issue a crazy cert like that.

It's easy to do once you have a good relationship with your CA.

You can also self-sign for internal machines, and leave your public ones one wildcard deep.

It's most likely internal, you run your own org ca.

Reply on news.ycombinator.com