Add a certificate to a second domain name

#1

Hello,
How can I add a certificate to a domain name redirected to an ipV4 address knowing that a secure domain name is already redirected to this ipV4.

Best regards.

Eric

#2

Hi @agrepe

I don’t understand your setup. How did you create the certificate? Root access or shared hosting? Or a control panel?

Redirecting to an ip address is always a bad idea -> doesn’t work with a Letsencrypt certificate.

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:

I ran this command:

It produced this output:

My web server is (include version):

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don’t know):

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

#3

Hello,
Thank you for your reply.

I install the certificate to the domain name according to the procedure: https://certbot.eff.org/lets-encrypt/debianjessie-apache
On a VPS.
This is a few months ago.

now, i need now to add a new domain name also directed to the ipV4 of this VPS.
It’s on this one that I want to file a certificate.

Best regards.

Eric

Le mar. 10 sept. 2019 à 10:32, Juergen Auer via Let’s Encrypt Community Support letsencrypt@discoursemail.com a écrit :

#4

What means “directed”? An A-record?

What’s running on that server?

Perhaps create one certificate with both domain names.

#5

When I say “Directed” I’m talking about the redirection of the domain name to the site (redirection ipV4)
On this server I have a JOOMLA site.

For other sites it works very well when I create the certificates of the different domain names at the same time, but this is a new domain name that must redirect to this site in parallel with the first one.

Le mar. 10 sept. 2019 à 11:06, Juergen Auer via Let’s Encrypt Community Support letsencrypt@discoursemail.com a écrit :

#6

Please share your domain names. It’s unclear what your “directed” means. A-record? Frame-redirect, http redirect, hoster redirect?

1 Like
#7

The domain names are:

www.mercadobey.com

and

www.mercadoapoyo.com

Thank

Le mar. 10 sept. 2019 à 11:47, Juergen Auer via Let’s Encrypt Community Support letsencrypt@discoursemail.com a écrit :

#8

That domain

has a working www version - https://check-your-website.server-daten.de/?q=mercadoapoyo.com

CN=www.mercadoapoyo.com
	10.09.2019
	09.12.2019
expires in 90 days	www.mercadoapoyo.com - 1 entry

The non-www doesn’t work, there is a self signed certificate:

CN=vps717332.ovh.net
	08.08.2019
	05.08.2029
expires in 3617 days

So different vHosts answer, that’s bad. Should be one vHost.

The other domain has the same ip address and the same self signed certificate ( https://check-your-website.server-daten.de/?q=mercadobey.com ).

And it’s an Apache.

First step: Your vHost configuration. What says

apachectl -S

There you should have two vHosts, both with two domain names (non-www and www).

If this is done (and correct), you have two options:

  • Two certificates, both with two domain names.
  • One certificate with 4 domain names.

Have both domains the same content? Yep, the content is the same. But then it’s duplicated content, that’s not good.