# Elasticsearch Shield SSL Certificates **URL:** \ **Category:** Elasticsearch\ **Created:** [February 25, 2016, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-certificates/42669 "2016-02-25T06:16:20Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![radap](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/radap/32/8037_2.png) [@radap](https://discuss.elastic.co/u/radap)\ **Post date:** [February 25, 2016, 6:16am UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-certificates/42669/1 "2016-02-25T06:16:20Z")
Hi guys! I`m using elastic 2.2.0 with shield 2.2, 10 nodes cluster. I need to enable ssl in Elastic for Kibana to work with shield and I got [troubled](http://stackoverflow.com/questions/35556673/elasticsearch-shield-ssl-using-single-signed-certificate-for-domain) on the certification signing part. **I do not have a wild card certificate** so I cant sign just one csr in node and copy it to all other nodes, I tried to use [letsencrypt](https://letsencrypt.org/) ([with the elastic tutorial](https://www.elastic.co/guide/en/shield/current/ssl-tls.html)) and sign a certificate with common name of node1 and alternative names of node2-10 and copy it to all other nodes (of course I firstly created domains for all 10 servers and pointed it to node1, sign the csr, then pointed all the 9 to the right server), [it didn't work](https://community.letsencrypt.org/t/elasticsearch-shield-ssl-using-single-signed-certificate-for-domain/11313) and I got a lot of "bed certificate" exceptions in the nodes log. As I said, I need ssl for kibana to work with shield, and for secure connections in general, and I planning to add some more nodes to the cluster... How can I manage to do so? What would be the best architecture for that purpose? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 11:13pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-ssl-certificates/42669/2 "2017-07-05T23:13:45Z")