Multiple SSL domains on the same IP address and same port?

It's possible to host multiple SSL (Secure Socket Layer) domains on the same IP address and port using Server Name Indication (SNI). SNI is an extension to the Transport Layer Security (TLS) protocol, allowing a client to specify the hostname it's attempting to connect to during the SSL handshake process.

SNI enables a server to present multiple SSL certificates on the same IP address and port and allows the server to determine which certificate to use for establishing the secure connection based on the hostname requested by the client.

This means that a single server can host multiple SSL-enabled websites on the same IP address and port, and the server can serve the appropriate SSL certificate corresponding to the requested domain.

Most modern web servers, like Apache, Nginx, and Microsoft IIS, support SNI. However, older browsers or operating systems may not support SNI, so it's essential to consider compatibility when setting up multiple SSL domains on the same IP address and port.

Keep in mind that while SNI is widely supported, some legacy systems might not work seamlessly with this setup. Always consider the requirements and compatibility of your audience when configuring multiple SSL domains on the same IP and port.

Got an article suggestion? Let us know

Explore more

SSL

What is SSL Certificate Monitoring?

Learn what is SSL certificate monitoring, how does it work, what are the benefits and drawbacks and how to set it up.

Guides

SSL Certificate Problem: Unable to get Local Issuer Certificate

If you get SSL certificate problem: unable to get local issuer certificate error, it's an indication that your root and intermediate certificates on the system are not working correctly or not set up correctly.

Questions

10 Best SSL Certificate Monitoring Tools in 2023

Failing to update your SSL certificate is the equivalent of shooting yourself in the foot and trying to run. It is possible, but not recommended, nor smart.

Comparisons

How to verify SSL certificates on the command line?

To validate an SSL certificate you can use one of the following approaches, depending on the type of the certificate.

Questions

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.