Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a plan to buy a SSL certificate for my domain. I don't have much budget so I decided to buy standard SSL with no support for sub-domains. I have a WCF web-service that works on sub-domain. This WCF service is consumed by the website on the main domain. So, I want to ask that if I add a SSL certificate to main domain, will sub-domain will be effected by it? I mean it is compulsory for both to have SSL for both to work properly?

share|improve this question
up vote 2 down vote accepted

SSL and certificates don't actually know what a "domain" is.

When a client (e.g. Web browser, or an application which calls a Web service) connects to a SSL server, it will look at the server's certificate (as sent by the server itself) and will accept it only if the certificate contains the intended server name. If the client wants to talk to, then the client will require that the certificate contains

A "domain certificate" is a fancy name for a certificate which contains the name *, also known as wildcard certificate. The client will consider it as good enough if the intended server name is for any value of anything.

No part the whole thing has any awareness of the "domain" as a whole. Server will not mind that uses or does not use SSL, regardless of any certificate contents; and any client connecting to will be interested only in what it finds in the certificate sent back by that server; and it will be interested only in whether appears as a name in the certificate, as such or under the guise of a wildcard name.

share|improve this answer
So that means if does not uses SSL and if website at uses this as web service and is SSL secured, so this will not effect the working of web service? – Aishwarya Shiva Oct 3 '13 at 20:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.