Comments on: Creating a SubjectAltName (SAN/UCC) CSR

By: SSL Certificate for local domain - Admins Goodies

SSL Certificate for local domain - Admins Goodies — Mon, 15 Aug 2011 08:58:23 +0000

[...] the best you can do is a UCC cert that lists all of the hostnames individually. Here are instructions on generating a CSR from openssl to do this (since the standard prompts will not ask for the subjectAltName field). So you could create a [...]

By: Tom

Tom — Fri, 01 Jul 2011 21:33:23 +0000

This article really helped me setup ssl on media temple’s grid service. Thanks so much.

By: Luis Gonzalez

Luis Gonzalez — Wed, 16 Jun 2010 17:20:16 +0000

I should clarify.
I have access to a Geotrust reseller portal, and the “True BusinessID” SSL certificate does indeed recognize SAN’s in the CSR, but it does also offer the option of typing them in manually.

By: Luis Gonzalez

Luis Gonzalez — Wed, 16 Jun 2010 17:19:01 +0000

I have access to a Geotrust reseller portal, and it does indeed recognize SAN’s in the CSR, but it does also offer the option of typing them in manually.

By: Ben Dominguez-Benner

Ben Dominguez-Benner — Tue, 08 Jun 2010 18:00:45 +0000

This article answered 95% of what I have questions on. I am going to search your site to see if you already have an answer for the remaining 5% of my questions.

Good stuff man!!!!

(And in regards to being more expensive than a single domain, yes if all you are doing is securing one or two domains, then just buy individual domains, but if you are securing many domains, then the Multi-Domain (UCC) is the way to go, saves on SSL costs and IP address fees that likely exist for your hosting environment.

By: Jamie Gellar

Jamie Gellar — Wed, 09 Dec 2009 11:07:09 +0000

I try and outline the benefits of UCC or Subject Alt Name SSL to all my clients, so I might point them to the opening paragraph of this blog which is a great summary. Particularly when customers are often registered with various geographically based domains or subsidiaries now.

By: Paul

Paul — Sat, 28 Feb 2009 01:41:57 +0000

CAs that support UCC definitely charge more for that privilege. Additionally, commercial CAs will — in general — just drop all SAN extensions present in the CSR and require the user to input them through a web interface. This example is more for testing or academic purposes than anything else.

By: Sean Schulte

Sean Schulte — Sat, 28 Feb 2009 01:35:29 +0000

Do CAs accept such CSRs for a certificate that sign multiple domains?

Sounds like it should be more expensive than a regular one-domain cert.