Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Can a SSL certificate be signed by multiple certificate authorities?

It would be nice to spread the trust around a bit, so we don't have to rely on just one root in any instance.

Is it possible to have a single certificate signed by more than one CA?

like image 350
Ben Sand Avatar asked Jun 28 '11 11:06

Ben Sand


People also ask

Can you have 2 certificate authorities?

You can have two certificates issued for the same domain and same server from different providers and it will cause no disruptions. This gives you time to install a new one and uninstall an older one without causing a lapse in security.

Can multiple servers share an SSL certificate?

It depends on the CA and the certificate license. To install the same certificate on multiple servers, first install the certificate files to the server where the CSR was originally generated. Then import the files (along with the private key) to the respective servers.

Can you have 2 SSL certificates on one server?

It is possible to install two SSL certificates for one domain because of server name indication (SNI) technology.

How many SSL certificate authorities are there?

There are over 100 different certificate authorities around the world that validate businesses and sites across the globe. Notably, imposters may still attempt to take advantage of certificates, so web users should still be familiar with site trust indicators, including site seals, to know if a website is secure.


2 Answers

No, the X509 certificate format up to version 3 is designed to contain exactly one signature.

like image 145
President James K. Polk Avatar answered Oct 05 '22 23:10

President James K. Polk


Yes, it is possible. You can find an example here:

http://www.confusedamused.com/notebook/fixing-verisign-certificates-on-windows-servers/

enter image description here

like image 41
bedrin Avatar answered Oct 06 '22 00:10

bedrin