Multi-Domain (SAN) certificates: will "www.domain.com" and "domain.com" count as two SAN entries?

When using multi-domain SSL certificates www and non-www versions of the domain name are considered to be different domain names, and will require separate SAN (addon) slots in the certificate.

However, when using GeoTrust/Symantec/Thawte certificates you can get a free SAN of domain.com if the Common Name of the SSL is www.domain.com, so the non-www version of the common name will be secured by the SSL for free.

SAN Example for COMODO PositiveSSL Multi-Domain:

CSR Slot #1: www.domain1.com

SAN Slot #2: domain1.com

SAN Slot #3: abc.domain1.com

SAN Slot #4: xyz.domain1.com

SAN Slot #5: www.domain2.com

SAN Slot #6: domain2.com


SAN Example for GEOTRUST True BusinessID:

CSR Slot #1: www.domain1.com           

(as this is the main domain and www.domain1.com was specifiec inside CSR, domain1.com will automatically be included for GEOTRUST True BusinessID!)

SAN Slot #2: abc.domain1.com

SAN Slot #3: xyz.domain1.com

SAN Slot #4: www.domain2.com

SAN Slot #5: domain2.com


Was this answer helpful?

 Print this Article

Also Read

Can you issue SSL certificates for .krd / .gov.krd (Kurdistan - Iraq) domains?

YES, the TLD has been added by GeoTrust / RapidSSL on our request for one of our customers. ;-)

Where can i get a Wildcard EV (Extended Validation) SSL certificate?

Unfortunately EV certificates cannot be Wildcard due to CA/B Forum policies, so the only option...

Multidomain SAN Upgrade: is it possible to purchase additional SAN slots later?

Yes, it is possible to increase the SAN slot count for an existing multi-domain SSL certificate....

How do i create a CSR (Certificate Sign Request) in Microsoft Exchange 2010? How do i install my SSL certificate in Exchange 2010 server?

YouTube: https://www.youtube.com/watch?v=GD0Ro0etUPQ

PositiveSSL Multi-Domain - How to change approval email address per domain (multidomain)

For example, if "admin@" is selected as approver having main domain specified as "domain.com" and...