🛡️
blog.cat.ssl

SAN SSL — multiple domains in one certificate, when and how to use it

18.04.2035
← All articles

You have several domains: main business site, landing pages, old versions, language variants. Buying SSL for each is expensive and hard to manage. SAN certificates let you combine up to 100 domains in one certificate. Ideal for corporate and large projects.

What SAN is and how it works

SAN is a field inside the certificate that lists multiple domain names. Traditional certificates are issued for one domain (Common Name), but with SAN one certificate covers 5, 10, 50 or 100 domains. Browsers check the list inside the certificate when visiting a site and show the lock if the current domain is listed.

SAN vs Wildcard

Wildcard works as *.sayt.uz — covers any subdomain automatically. But it doesn't work on another domain like domen.uz. SAN is the opposite — covers different domains but each must be listed. Strongest option is Wildcard SAN: different domains plus their subdomains together.

When SAN is needed

A company has 5-10 sites: corporate, blog, store, sub-brands, locale variants. Individual SSL costs 100 dollars or more, SAN runs 50-150 dollars. Management is easier: one certificate, one expiry. SaaS platforms and corporate portals can't function without SAN.

Adding and removing domains

Initial domain list is specified when ordering SAN. Later additions go through reissue — usually free but takes time. Validation re-runs for all new domains. Some providers cap the maximum: 5, 25, 100 depending on the plan.

Validation types

SAN comes in DV, OV and EV flavors. DV (Domain Validation) is simplest, 15-30 minutes. OV (Organization Validation) checks company documents, 1-3 days. EV (Extended Validation) is deep verification, 5-10 days, company name in browser bar. DV is enough for most.

Sayt.uz practice

Sayt.uz offers SAN SSL ordering. Packages for 3-5 domains from 450,000 UZS, corporate plans for 10-25 domains from 1,200,000 UZS. Auto-install, yearly reminders, renewal docs ready. For multi-site clients this is 3-5 times cheaper than separate certificates.

Related articles

📱 SSL pinning: the strongest defense against MITM attacks in mobile apps 🤝 SSL handshake process: the inner mechanics of TLS negotiation step by step 🔓 HTTPS padlock disappeared: causes and step-by-step fixes Monitoring SSL certificate expiry: alert services and automation tools
🌐 Language
🇺🇿 O'zbek 🇺🇿 Ўзбек 🇷🇺 Русский 🇬🇧 English