To consolidate multiple hostnames on a single SSL virtual server, which certificate type is most suitable?

• A. Bind the certificate of each website to a single SSL virtual server
• B. A wildcard certificate to a single SSL virtual server
• C. A multiple SAN certificate to a single SSL virtual server
• D. A wildcard certificate to a content-switching virtual server

Answer: (C)

Using one certificate that lists all the hostnames you want to secure is the way to consolidate multiple names on a single SSL vserver. This is done with a SAN (Subject Alternative Name) certificate, which embeds multiple DNS names inside one certificate. Bind that SAN certificate to the SSL vserver, and any of the included hostnames will be served from the same certificate, simplifying management and reducing the number of bindings.

A certificate bound per website would require multiple certificates on the same vserver, defeating consolidation. A wildcard certificate covers all subdomains of one domain (like *.example.com) but won’t cover unrelated hostnames across different domains. A wildcard on a content-switching vserver doesn’t address the need to bundle several distinct hostnames into one certificate for a single SSL vserver. So, a SAN certificate is the best fit for consolidating multiple hostnames on one SSL vserver.