From August 19th 2020, SECTIGO issues SSL certificates with a maximum lifetime of 398 days (13 months) as specified by CA/Browser consortium. SSL certificates with a longer lifetime must be re-issued annually (free of charge). You'll receive reminders via e-mail. SSL certificates issued before August 19th 2020 remain valid until their planned expiry date. Code Signing & S/MIME certificates are not affected and remain valid until their planned expiry date.

Multi-Domain (SAN) certificates: will "www.domain.com" and "domain.com" count as two SAN entries?

When using multi-domain SSL certificates www and non-www versions of the domain name are considered to be different domain names, and will require separate SAN (addon) slots in the certificate.

However, when using GeoTrust/Symantec/Thawte certificates you can get a free SAN of domain.com if the Common Name of the SSL is www.domain.com, so the non-www version of the common name will be secured by the SSL for free.

SAN Example for COMODO PositiveSSL Multi-Domain:

CSR Slot #1: www.domain1.com

SAN Slot #2: domain1.com

SAN Slot #3: abc.domain1.com

SAN Slot #4: xyz.domain1.com

SAN Slot #5: www.domain2.com

SAN Slot #6: domain2.com


SAN Example for GEOTRUST True BusinessID:

CSR Slot #1: www.domain1.com           

(as this is the main domain and www.domain1.com was specifiec inside CSR, domain1.com will automatically be included for GEOTRUST True BusinessID!)

SAN Slot #2: abc.domain1.com

SAN Slot #3: xyz.domain1.com

SAN Slot #4: www.domain2.com

SAN Slot #5: domain2.com

Was this answer helpful?

 Print this Article

Also Read

Wie erstelle ich einen CSR (Certificate Signing Request) in Microsoft IIS ?

Für Microsoft IIS und Exchange Console empfehlen wir NICHT unseren Online Generator zu nutzen...

Multidomain SAN Upgrade: is it possible to purchase additional SAN slots later?

Yes, it is possible to increase the SAN slot count for an existing multi-domain SSL certificate....

What is PRE-SIGN FAILED? What is a CAA record? - DNS Certification Authority Authorization (CAA) Resource Record

The Certification Authority Authorization (CAA) DNS Resource Record allows a DNS domain name...

How long does it take until HTTP based authentication is verified?

Typically HTTP-based authentication will be done within a couple of minutes. If you think the...

Can you issue SSL certificates for .krd / .gov.krd (Kurdistan - Iraq) domains?

YES, the TLD has been added by GeoTrust / RapidSSL on our request for one of our customers. ;-)