From August 19th 2020, SECTIGO issues SSL certificates with a maximum lifetime of 398 days (13 months) as specified by CA/Browser consortium. SSL certificates with a longer lifetime must be re-issued annually (free of charge). You'll receive reminders via e-mail. SSL certificates issued before August 19th 2020 remain valid until their planned expiry date. Code Signing & S/MIME certificates are not affected and remain valid until their planned expiry date.

Multi-Domain (SAN) certificates: will "www.domain.com" and "domain.com" count as two SAN entries?

When using multi-domain SSL certificates www and non-www versions of the domain name are considered to be different domain names, and will require separate SAN (addon) slots in the certificate.

However, when using GeoTrust/Symantec/Thawte certificates you can get a free SAN of domain.com if the Common Name of the SSL is www.domain.com, so the non-www version of the common name will be secured by the SSL for free.

SAN Example for COMODO PositiveSSL Multi-Domain:

CSR Slot #1: www.domain1.com

SAN Slot #2: domain1.com

SAN Slot #3: abc.domain1.com

SAN Slot #4: xyz.domain1.com

SAN Slot #5: www.domain2.com

SAN Slot #6: domain2.com


SAN Example for GEOTRUST True BusinessID:

CSR Slot #1: www.domain1.com           

(as this is the main domain and www.domain1.com was specifiec inside CSR, domain1.com will automatically be included for GEOTRUST True BusinessID!)

SAN Slot #2: abc.domain1.com

SAN Slot #3: xyz.domain1.com

SAN Slot #4: www.domain2.com

SAN Slot #5: domain2.com


Was this answer helpful?

 Print this Article

Also Read

Tomcat CSR generation and CRT import (Java Keystore .JKS), Matrify, GlassFish, Wildfly ...

keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore www.domain.com.jks keytool...

GEOTRUST RapidSSL: Installing SSL certificates including intermediate (ca_bundle) certificate on nginx

Note: When placing your CSR inside the MY INTERSSL account, please choose server type...

Enabling Webserver (WebStation) for HTTP validation under Synology DiskStation Manager

In Synology Diskstation you first have to enable the "WebStation" service. "WebStation" is the...

Wie erstelle ich einen CSR (Certificate Signing Request) in Microsoft IIS ?

Für Microsoft IIS und Exchange Console empfehlen wir NICHT unseren Online Generator zu nutzen...

What is PRE-SIGN FAILED? What is a CAA record? - DNS Certification Authority Authorization (CAA) Resource Record

The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name...