After a security incident, an administrator revokes the SSL certificate for their web server Later, users begin to inform the help desk that a few other servers are generating certificate errors…

Question

Options

• AEach of the servers used the same EV certificate.
• BThe servers used a wildcard certificate.
• CThe web server was the CA for the domain.
• DRevoking a certificate can only be done at the domain level.

• A
  9% (3)
• B
  72% (23)
• C
  16% (5)
• D
  3% (1)

Explanation

A wildcard certificate is issued for an entire domain using a wildcard in the Common Name, such as *.company.com. This single certificate is shared across all subdomains - ftp.company.com, mail.company.com, partners.company.com, and the main web server. When the administrator revoked the certificate after the security incident, that single revocation invalidated the shared certificate on all servers using it, causing simultaneous certificate errors across all affected hosts. This is a key trade-off of wildcard certificates: they simplify certificate management but create a single point of failure when revocation is needed.

No community discussion yet for this question.