Forum Discussion
gdoyle
Cirrostratus
CirrostratusCreating SSL Cert with a SAN the same as the CN.
Hey, all. I'm trying to create an SSL Certificate with the CN being the same as the SAN (for example, I want the CN to be mysite.com and the SAN to also be mysite.com). I know this sounds like it is ...
gersbahCirrostratus
CirrostratusSeparated by comma:
DNS:abc.def.ghi, DNS:jkl.mno.pqr
Just in case it ever comes up, you can also use "IP:1.2.3.4" for IP addresses, although in most cases I would advise to stick with DNS names.
If F5 is taking feedback here, that info would probably be a good addition to the "help" menu for certificate creation.
gersbahCirrostratus
CirrostratusI don't have a lot of practical experience with wildcard certificates. But as far as I know there's no special syntax or special treatment for wildcards in the CSR. As long as the CA is willing to sign it, it should work.
Only caveat I can think of is that it wont match multiple subdomain levels.
So *.domain.com does match a.domain.com but does NOT match a.b.domain.com
