No, you don’t need a different SSL certificate for WWW & Non-WWW Domain. A single SSL certificate is enough
When people create a website they have one question about website security like do I need a different SSL certificate for non-WWW and WWW domains? We have shared complete information about the question. Keep reading.
According to the WWW standards although any website is deployed with the “non-www domain” it will deploy smoothly as well with a “www domain“. WWW is a DNS naming structure; actually “www domain” should not be counted as the subdomain of a “non-www domain” instead it is an alias for the non-www domain.
SSL is encryption-based protocol. It will secure that domain only for which it has been issued. Hence, if the SSL certificate is issued for a non www domain, then it will secure that domain only.
However, there are some ways for protecting both the domains with a single SSL certificate and they are:
Purchasing An SSL Certificate From Those Brands Who Gives Such Facility:
SSL Brands like Comodo, RapidSSL, GeoTrust, Thawte and DigiCert provide the advanced feature of securing the WWW domain name and the non-WWW domain name by a single certificate. Within such process when the certificate is issued, generate the CSR (code signing request) key for the www domain and in turn it will secure a non www domain. For example, if the CSR is generated for www.mydomain.com then it will also work in hand for mydomain.com. The browser will show “HTTPS” before both addresses. Check out these brand’s standard SSL certificates from here:
|Thawte SSL123||Comodo Positive SSL Wildcard||RapidSSL Wildcard|
|Our Cheapest Price||$32.29/yr.||$45.00/yr.||$96.00/yr.|
|Buy Now||Buy Now||Buy Now|
|Secure||Single Domain||Unlimited Subdomains||Unlimited Subdomains|
|Issuance Time||10 Minutes||10 Minutes||10 Minutes|
|Key Encryption||2048 bits||2048 bits||2048 bits|
|Google Rankings Boost|
|Green Address Bar|
|SAN / UCC Support|
|Warranty By CA||USD $500,000||USD $10,000||USD $10,000|
|Refund Policy||30 days||30 days||30 days|
|Buy Now||Buy Now||Buy Now|
Redirecting The Non WWW Domain To The WWW Domain:
If you have already purchased an SSL certificate from another brand, then this alternative way is free of cost as it can be achieved at the development level. For this, you need to use the “301” redirection. “301” is the HTTP response status code for redirecting permanently to another URL location. Suppose you type abc.com then it should be redirected to www.abc.com. You can then acquire an SSL certificate for the WWW domain.
Installing Wildcard SSL Certificate:
Wildcard SSL certificate provides security to unlimited subdomains if purchased for a single domain. If you purchase a Wildcard SSL certificate for yourdomain.com, your www.yourdomain.com will be secured along with every other subdomain of your site.
The redirection option is not that convenient because it requires a thorough change in the coding of the website. Whereas purchasing the Wildcard certificate is the costliest choice.
As far as the relevancy and budget are concerned for purchasing a standard SSL certificate, RapidSSL Certificate and Geotrust QuickSSL Premium are the best recommended.