How to Monitor SSL for Subdomains & Wildcards

Monitoring SSL certificates for subdomains and wildcard domains is crucial for comprehensive website security, especially if you manage complex web properties. Domainyze can help you keep an eye on these.

Understanding Subdomains and Wildcard Certificates

• Subdomains: A subdomain is a domain that is part of a larger domain (e.g., blog.example.com, shop.example.com). Each can have its own individual SSL certificate or be covered by a multi-domain or wildcard certificate.
• Wildcard Certificates: A wildcard SSL certificate (*.example.com) secures a domain and an unlimited number of its first-level subdomains. This is convenient but requires careful management.
• Multi-Domain (SAN) Certificates: These certificates (example.com, blog.example.com, shop.example.com) can secure multiple distinct domain names and subdomains with a single certificate.

How to Monitor with Domainyze

Domainyze monitors certificates based on the specific domain name you add to your Portfolio.

1. Add Each Subdomain Individually: If your subdomains use individual SSL certificates, you must add each subdomain (e.g., blog.example.com, shop.example.com) as a separate entry to your Domainyze Portfolio. Our system will then monitor each certificate independently.
2. For Wildcard/Multi-Domain Certificates: If your main domain and its subdomains are covered by a single wildcard or multi-domain (SAN) certificate, you typically only need to monitor the main domain (e.g., example.com). Our system will check the certificate presented by that main domain. Since wildcard/SAN certificates cover multiple names, monitoring the primary domain for its certificate's health is usually sufficient to ensure all covered subdomains are also secure.

Best Practices

• Verify Coverage: Always double-check that your wildcard or multi-domain certificate is correctly configured to cover all your intended subdomains.
• Consistent Installation: Ensure the same valid certificate is installed across all servers hosting your main domain and subdomains.
• Set Alerts: Configure SSL expiration alerts for all monitored domains/subdomains in your Domainyze Portfolio.

By thoughtfully adding your subdomains and main domains, you can ensure comprehensive SSL coverage and timely alerts for your entire web presence.