Showing posts with label SSL. Show all posts
Showing posts with label SSL. Show all posts

2024-06-14

Multi-Domain (SAN/UCC) SSL certificates





Reference URL:
 
What is a Multi-Domain Wildcard SSL Certificate?
A multi-domain wildcard SSL certificate is the perfect solution for situations where you need to secure multi-level subdomains. It allows encrypting multiple levels of subdomains with one certificate. Like the wildcard certificate, it can work whether the sites are on the same or separate servers.

----------



With a wildcard SSL certificate, the solution is a bit simpler. You can purchase 7 wildcard SSL certificates, to protect:

*.domain.com
*. blog.domain.com
*.preview.domain.com
*.project1.preview.domain.com
*.project2.preview.domain.com
*.project3.preview.domain.com
*.project4.preview.domain.com

That’s still a lot of certificates to purchase and manage. A multi-domain wildcard SSL certificate allows you to purchase a single SSL certificate, and add the above 7 sites as SANs (subject alternative names) to the SSL certificate. This allows you to save a lot of money and hassle by purchasing and installing a single SSL certificate.

Bottom line: If you have multiple levels of subdomains, a multi-domain wildcard SSL certificate is your best option!

----------

Choose Multi-Domain Wildcard SSL Certificate If You Want to...
Secure your website using impenetrable 256-bit symmetric encryption strength
Secure up to 250 fully qualified domain names
Secure unlimited sub-domains
Have unlimited server licenses
Save money, time and efforts
Streamline your SSL management
Authenticate your site using domain or organization validation

----------

SAN (Subject Alternative Names) is the previous keyword i found:

to hv
*.youtube.com
supported in
*.google.com ssl

----------

this round i found:

Multi-Domain (SAN/UCC) SSL certificates

is the one with SAN supported
They’re also called Unified Communications SSL certificates


----------

2023-09-08

Internet Options - USE TLS grey out.

 

Internet Options
Some settings are managed by your system administrator.

Reference:


After Enabled:     Turn off encryption support

Use TLS checkboxes are grey out.









Struggled few days then found this....



Although has set Not Configured for  Turn off encryption support







Still need to remove/delete/rename key below to enable those TLS checkboxes in Internet Options.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SecureProtocols





What I did were:
  1. Set Not Configured for Turn off encryption support in:
    1. Computer Configuration:

      Local Computer Policy
       > Computer Configuration > Administrative Templets > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > Turn off encryption support

    2. User Configuration:

      Local Computer Policy
       > User Configuration > Administrative Templets > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > Turn off encryption support

  2. Renamed key of SecureProtocols to tobedeleted_SecureProtocols


Relevant:
  1. FortiClient failed to connect.


















Google Referrals