Does each subdomain need its own SSL certificate?

Better Stack Team
Updated on October 5, 2023

This depends purely on what type of certificate you have. You can have a standard single domain certificate. Aside from that, you can also get two following types of certificates.

Wild card certificate

Wild card certificate can be issued for domains that look like this *.example.com. This will ensure SSL encryption on all subdomains that end with .example.com. For example ws.example.com app.example.com and so on.

Multi-domain certificate

The second option is to use a multi-domain certificate that can be issued for a predefined list of domain names. This will ensure SSL encryption an all domains in the list using the Subject Alternative Name field of the certificate. For example, you can get a single certificate for ws.example.com and app.example.com.

If none of those options would work for you, you are left with the option of a separate certificate for each domain.