Multi-Domain (SAN) Certificates

[alect001]

is is possible to create a cert that include all domains ? (Multi-Domain (SAN) Certificates)
a cert that include not only the main domain but also other domain all in one user's account?
Of course the domain pointer is also included.

I have a server that have 5 ips,i assign 4 ips to 4 different users,each of them have multiple domains,but only one didicated ip,and SNI is not very friendly at the moments.So SAN/UCC cert is needed.

[Wouter0100]

Why is SNI not very "friendly"? But; this isn't possible at the moment and also not planned. I've added it to the future milestone (a wishlist).

[alect001]

about 30% of my vistors still using windows XP that did not support SNI,i'm afraid maybe windows XP will live for another 5 years.

[Wouter0100]

Currently the plugin is per-domain oriented, to implement "user-wide" SSL certificates we've to make many changes.

[alect001]

got it,hope to use the UCC/SAN cert in the near future,thank you for the great work!

[Wouter0100]

Windows XP is already EOL, followed by IE7 and IE8 in the near feature. I'm not sure if we've to take care of these users which does run very insecure(/EOL) systems.. Is there any reason you have such a high visitor rate from Windows XP machines? Here it's ~3% (of all Windows machines) over the last 4 years.

[alect001]

I'm live in China,there are still many users using WinXP.
And a lot of websites using UCC/SAN certs,
you just can't ingore these users who are still using EOL systems.
Google inc. has so many ips,why they also sign ucc/san certs?

[icodex]

really have much hope on this, I'm also a DirectAdmin user in China, it's true there are still so many people using windows XP/IE7/IE8.

[Wouter0100]

Hmm, that's unfortunate.. Ehm.

[zenire]

The people using Windows XP/IE7/IE8 should upgrade. You can't support EOL software forever. When we will support it, we will promote to keep using Windows XP/IE7/IE8.

[alect001]

I can't ask them to upgade to the lastest os,all i can do is provide them the best experience.And you just can't abandon/ingore them in order to promote innovation and technological change.

I'm just telling you that still many people who are using outdate systems,it's your right to do or not to do.

There are so many company using UCC/SAN certs such as Google/CloudFlare/Facebook/wikipedia and so on, and why they don't ask their vistors to use a modern systems? Should we abandon/ingore them?

And at last,sorry for my bad english,english is not my native language,maybe i can't let you understand what i said.Thanks again for the great work and wish you a happy day!

Best Regards,