First post here. Planning to get our first ssl certificate. We have a domain and multiple A records point to 2 different IP Addresses.
Domain : mytest.net
Server1 : www.mytest.net , t1.mytest.net
Server2 : t2.mytest.net , t3.mytest.net
If we want to achieve https for all A record pointers (www, t1,t2,t3) of our domain,
Do we need to install same certificate in both servers or need to get different certificates ?
Hi, welcome.
In general you would get a certificate for each subdomain and configure those in your web server.
Sometime you might combine two or more names for convenience on one cert, e.g. mytest.net and www.mytest.net may be the same site, so you'd put both names on.
How you achieve that varies depending on the operating system and web server you are running as well as the ACME client you have chosen.
Now you know what all those questionnaire questions were for!
As @webprofusion noted there are many ways to resolve this. It is impractical to describe every option so the info from the questionnaire is helpful to focus our efforts. I've reposted that below.
Is mytest.net your actual domain name? Because it is a valid domain with an Apache server replying. If it is not your domain please do not use other people's domains in your example. Use the standard example.com or other industry standard names for that purpose.
However, we can be much more helpful with actual domain names. For example, a DNS Challenge may be useful in your case but that depends on which DNS provider you use. We can look that up knowing your actual domain and save all of us some time.
=====================================================
Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is:
I ran this command:
It produced this output:
My web server is (include version):
The operating system my web server runs on is (include version):
My hosting provider, if applicable, is:
I can login to a root shell on my machine (yes or no, or I don't know):
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):