Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.
Off topic for laravel, but thought someone might ring in here.
I am setting up potentially 1000s of websites, via a clustered linode environment (managed by laravel forge). I was hoping to use some sort of shared SSL. I see there are "multi-domain" certificates allowing typically up to 100 unique domains on one certificate. This would be nice. But it talks about the certificate listing all the domains in it... I don't want the user to look in the certificate in their browser and get confused by seeing more than their site.
Does anyone know how this works? Or if there is a better solution to certificate management once you start hosting lots of sites?
Thanks!
If you dont want that a User can see all other SSL users you have to buy a normal SSL. A Multi Domain Cert is a Shared Cert, so everyone would see which Domain also uses the SSL.
If you really need up to 1.000 SSL Certs i would contact comodo directly to get a much cheaper price.
That's what I was hoping not to hear but figured was the answer. Thanks for confirming. Any thoughts on how to cheaply get certs for thousands of sites? Is there a way to self-sign yet pay a CA to validate for a fee?
@nate.a.johnson Maybe you should contact Comodo itself and ask for a discount. That would be the best option. Comodo are the cheapest SSL(s). Or you could contact Comodo to become a Reseller and you sell the Certs to yourself :)
Otherwise the chepeast SSL Sellers are: https://cheapsslsecurity.com/ , https://www.ssls.com/ , https://www.namecheap.com/security/ssl-certificates/comodo.aspx
Another Option would be a free Shared SSL via CloudFlare. Customers would also see other Websites if someone checks the Cert, but this wouldnt be your customers. So you could argue its because the awesome CloudFlare Service which are using a Shared SSL. And a shared SSL does not have any disadvantages :)
@nate.a.johnson You sound like the target audience for the "Let's Encrypt" initiative from the EFF:
Supposed to launch before the end of the year. Automated API to get valid and free SSL certificates in an automated way. And backed by the EFF and other organizations. I am very much looking forward to it.
@noeldiaz wow awesome - didnt know these site. Boomarked :)
@noeldiaz Haven't checked this thread in some time, but yeah, we are using Let's Encrypt since I wrote this post. Good stuff now that it's finally stabilizing.
Please or to participate in this conversation.