Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have just been granted a wildcard SSL certificate for a sub-domain that we manage (e.g. *

Rather than use this certificate on all of our IIS servers, I have been asked to use this certificate to sign certificates for each of our servers.

I've tried some Googling on this topic but I can't find anything. Does anyone know if this is possible and if so how to do it?

We're running Windows Server 2008 with IIS 7.

share|improve this question
I would contact the provider of the wildcard SSL certificate for assistance. – Ramhound Sep 30 '11 at 14:36
up vote 1 down vote accepted

Certificates contain a usage restriction. Common certificates you get from a CA only contain the usage flag for using the certificate for authentication and purposes - hence to use it with SSL/TSL. For creating sub-certificates and sign them with the one you have you need a special certificate which can be used as intermediate CA certificate. Such certificates are much more expensive than regular certificates and you have to make provide a special hardware infrastructure and do a lot of certifications before you can get it.

Conclusion: I doubt that the certificate you have can be used to issue certificates.

share|improve this answer

Certificates you get from a CA can not be used to sign other certificates.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.