Requirements for SAN Certificate

depam · 01-15-2015, 10:30 PM

Correct me if i am wrong, SAN cert will allow you to use the cert for multiple hostnames by using the Subject Alternate Name on the cert. Question is, does it require that the CSR should have those values (maybe concatenate on CN?)

Or is it you can just create a CSR of any CN then inform the CA that you want SAN cert with the multiple hostname?

TenTenths · 01-16-2015, 01:44 AM

CN is the "Common Name" that will appear inside the cert.
SAN are (as you say), alternate names.

I've only experience with "commercial" certs where we generate the CSR with the CN and then provide the cert issuer with the list of SANs that we wish included.

Just be aware that certain paranoid people may distrust a cert where there are multiple and different SANs within it.