SSL Certificate for domain with "www" OR without "www" ?

[Semenek]

Hello, I bought SSL certificate from my hosting webhostingpad.com

and they are telling me that I should decide should it work for domain with "www" or without.

Does it make any difference?

This is letter from hosting:

Your SSL will work in certain ways.

Your SSL is will be ordered for www.yourdomainname.com or yourdomainname.com


If you ask us to make certificate for www.yourdominname.com, your ssl will not work when you use yourdomainname.com and vice versa.

Please, help

[DrByte]

Well, first, it's up to *you* to decide how you wish to do it. Just be sure that you set the HTTP_SERVER and HTTPS_SERVER settings in your configure.php files accordingly.

Second, the more reputable SSL certificate issuers will allow BOTH the "www" and non-www versions in the SAME certificate, for no extra charge.

If your store is already set up so that when you click any of the links to your products it uses the "www" version, then tell your hosting company to choose that when they're creating their CSR pieces for the SSL request.

[Semenek]

Thanks!

[jasonh1234]

According to this documentation here

https://www.zen-cart.com/tutorials/index.php?article=14

"IT IS RECOMMENDED THAT YOU REGISTER IT TO YOUR "www." address, such as www.your_site.com (and not just "your_site.com")"

My cert. didn't come for both with the www and for the naked domain. My provider now tells me that in order to get the www as SSL I'd need to delete the current cert. from my domain and purchase a new one for use WITH the www.

How bad exactly IS it to run with the naked domain? I don't want to have to buy another cert. What could potentially go wrong? What is the basis for the recommendation given in that documentation?

This is one of the last steps for this client website and I really need to get this done asap as I'm behind schedule. Any insight would be appreciated.

[dbltoe]

Just use the .htaccess file to redirect all www traffic to the non-www.

Something Like :


Options +FollowSymlinks
RewriteEngine on
RewriteCond %{HTTP_HOST} ^www.yoursite.com$
RewriteRule ^/?$ "http\:\/\/yoursite\.com" [R=301,L]

[jasonh1234]

Just use the .htaccess file to redirect all www traffic to the non-www.

Wow. That was a FAST reply. :-) Yup done that.
So as long as my config php files reference the naked domain everything will be fine?