From August 19th 2020, SECTIGO issues SSL certificates with a maximum lifetime of 398 days (13 months) as specified by CA/Browser consortium. SSL certificates with a longer lifetime must be re-issued annually (free of charge). You'll receive reminders via e-mail. SSL certificates issued before August 19th 2020 remain valid until their planned expiry date. Code Signing & S/MIME certificates are not affected and remain valid until their planned expiry date.

Multi-Domain (SAN) certificates: will "www.domain.com" and "domain.com" count as two SAN entries?

When using multi-domain SSL certificates www and non-www versions of the domain name are considered to be different domain names, and will require separate SAN (addon) slots in the certificate.

However, when using GeoTrust/Symantec/Thawte certificates you can get a free SAN of domain.com if the Common Name of the SSL is www.domain.com, so the non-www version of the common name will be secured by the SSL for free.

SAN Example for COMODO PositiveSSL Multi-Domain:

CSR Slot #1: www.domain1.com

SAN Slot #2: domain1.com

SAN Slot #3: abc.domain1.com

SAN Slot #4: xyz.domain1.com

SAN Slot #5: www.domain2.com

SAN Slot #6: domain2.com


SAN Example for GEOTRUST True BusinessID:

CSR Slot #1: www.domain1.com           

(as this is the main domain and www.domain1.com was specifiec inside CSR, domain1.com will automatically be included for GEOTRUST True BusinessID!)

SAN Slot #2: abc.domain1.com

SAN Slot #3: xyz.domain1.com

SAN Slot #4: www.domain2.com

SAN Slot #5: domain2.com


Was this answer helpful?

 Print this Article

Also Read

Can you issue SSL certificates for .krd / .gov.krd (Kurdistan - Iraq) domains?

YES, the TLD has been added by GeoTrust / RapidSSL on our request for one of our customers. ;-)

SSL request and installation under Synology DiskStation NAS

If you want to obtain a SSL certificate for your Synology diskstation, we recommend to NOT use...

Requesting SSL certificates and SSL installation for all-inkl.com customers

All-inkl.com enables customers to install InterSSL certificates. You can find a tutorial here...

Tomcat CSR generation and CRT import (Java Keystore .JKS), Matrify, GlassFish, Wildfly ...

keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore www.domain.com.jks keytool...

Can i obtain a SSL certificate for a server with dynamic IP / DNS / DynDNS address? What about synology.me, myqnapcloud.com, dyndns.org subdomains?

Yes, it is possible to obtain a SSL certificate for dynamic IP based servers. For mail...