Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *

Rather than use this certificate on all of our IIS servers, I have been asked to use this certificate to sign certificates for each of our servers.

I've tried some Googling on this topic but I can't find anything. Does anyone know if this is possible and if so how to do it?

We're running Windows Server 2008 with IIS 7.

share|improve this question
I would contact the provider of the wildcard SSL certificate for assistance. – Ramhound Sep 30 '11 at 14:36
up vote 1 down vote accepted

Certificates contain a usage restriction. Common certificates you get from a CA only contain the usage flag for using the certificate for authentication and purposes - hence to use it with SSL/TSL. For creating sub-certificates and sign them with the one you have you need a special certificate which can be used as intermediate CA certificate. Such certificates are much more expensive than regular certificates and you have to make provide a special hardware infrastructure and do a lot of certifications before you can get it.

Conclusion: I doubt that the certificate you have can be used to issue certificates.

share|improve this answer

Certificates you get from a CA can not be used to sign other certificates.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .