SSL and domain with WWW or without WWW

why does my ssl work only for domain.co.il and not for www.domain.co.il is it like i read, that we need to order the SSL twice?

and what can be done about it, if this is the truth? how can it be redirected?

You either need two SSL certs one for www.domain.co.il and one for domain.co.il or you need one cert which has both names. We use certs from GoDaddy which when purchasing domain.co.il also includes www.domain.co.il automatically.

A wildcard certificate should work with any subdomain but do you really need both? Just tell your users http://domain.com and get the http to redirect to https://domain.com. Then setup http://www.domain.com to also redirect to https://domain.com If your users try http://www.domain.com it will still work and they probably wont do https://www.domain.com