F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

How to deploy more SSL sites with fewer SSL certificates

There is an increasing need to deploy SSL sites (SPDY, HTTP/2, and SSL Everywhere). Traditional SSL sites require deploying one SSL certificate per site. This gets very expensive ordering and maintai...
Published Apr 14, 2015
Version 1.0
application delivery
certificates
design
LTM
security
ssl
Eric_Chen's avatar
Eric_Chen
Icon for Employee rankEmployee
Jun 12, 2015
The distinction that I was making with wildcard certs is that they will match more names than a traditional / SAN cert. The best analogy I can think of is an ID card that said a person was from Virginia vs. named John Smith. Saying a person is from Virginia is valid, but could apply to many people vs. named John Smith is more precise. I would trust the more precise identifier.