What is Wildcard Domain SSL and How Does a Wildcard Domain Certificate Work?

A wildcard SSL certificate, or a wildcard domain SSL certificate as some people call it, is a special variant of SSL certificate that’s specifically designed to secure subdomains. A wildcard character in programming represents a variable that can be anything within a certain range. SSL/TLS is no different. The asterisk stands in at the subdomain level you’re trying to secure.

Read More

OV SSL vs EV SSL — Which Type of Certificate Should You Choose?

OV SSL vs EV SSL. Purchasing the “right” SSL certificate is a little bit more complicated than some of the hosting providers may have you believe. That’s largely owed to the fact they’re trying to sell you on a certain type or validation level that they’re likely getting good pricing on. It’s a resale opportunity. Everyone is trying to sell you something. Remember that.

Read More

What is SSL Client Certificate Authentication and How Does It Work?

Did you know that SSL can be used for both client authentication as well as server authentication? And what is SSL client certificate authentication to begin with?

When most people refer to SSL certificates and the authentication they provide, it’s done in the context of server SSL certificates — not client authentication. This is an important to note because the vast majority of SSL certificates that are used are server certificates. When a client arrives at a website, the server presents its certificate and the client performs an authentication to verify the identity of the certificate’s owner.

Read More

What is HTTP Public Key Pinning and Why It’s Not Good to Practice

In the annals of bad human ideas, HTTP public key pinning, or what’s more commonly known as HPKP, ranks right up there with spray-on hair and two-in-one toilet/bidets. Without straying too far into the proverbial weeds, we’re going to lay out why you definitely shouldn’t be pinning your keys in this blog post.

And to be clear — just in case you don’t read past this sentence — don’t pin your keys. Simply put, HPKP is a terrible idea, and it’s more likely to break your website than lead to any meaningful improvement in security! Even Google agrees.

Read More

What an SSL Common Name Wildcard Error Is and How to Fix It

Having wildcard(*) SSL certificate in common name (CN) issues? Here’s what you can do about it

Are you having issues with your wildcard SSL certificate, or have you seen a message akin to “WILDCARD(*) SSL CERTIFICATE IN COMMON NAME (CN)?” The second half of this question is actually a fairly misleading one because it’s a hyper-specific error that is really just a variant of a more common wildcard SSL error. So, if you have a wildcard SSL certificate installed on your server and you’re running into this issue, keep reading.

Read More

Why Is My Wildcard SSL Not Working on a Second Level Subdomain?

An In-Depth Look at Why a Wildcard SSL Certificate Causes a Domain Mismatch Error on a Second Level Subdomain

We know, you’re here because your wildcard SSL is not working on a second level subdomain for some reason. To help you understand why, we first need to tell you a bit about wildcard SSL certificates and what they do and don’t secure. The digital certificate industry is, at times, needlessly opaque about what its products actually do. The wildcard is one of the biggest offenders. It’s often marketed as securing “unlimited subdomains.” And that’s partially true — with one important caveat:

Read More

HostGator Wildcard SSL: How to Install a Wildcard SSL Certificate on HostGator

HostGator is a popular hosting platform (with an unfortunate mascot). Wildcard SSL certificates are X.509 digital certificates designed to encrypt sub-domains. Sometimes the two meet and one gets installed on the other. Maybe this is what you’re trying to do with what you might refer to as a “HostGator wildcard SSL certificate.”

Read More