# Can I issue a certificate with these perameters

**URL:** <https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425>\
**Category:** Help\
**Created:** [July 24, 2019, 10:34pm UTC](https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425 "2019-07-24T22:34:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![\_TWG](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/_twg/32/33187_2.png) [@\_TWG](https://community.letsencrypt.org/u/_TWG)\
**Post date:** [July 24, 2019, 10:34pm UTC](https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425/1 "2019-07-24T22:34:09Z")

</div>

I’m trying to figure out if I can generate a certificate in a specific way and I was hoping y’all might be able to help.

- I need the certificate to be X.509 with any intermediate and root certs.
- Needs to be a UCC that can contain two wildcard domains.

I’m hoping I can generate this with Let’s Encrypt. Thanks for any help.

---

<div class="post-metadata">

**Author:** ![\_az](https://avatars.discourse-cdn.com/v4/letter/_/22d042/32.png) [@\_az](https://community.letsencrypt.org/u/_az)\
**Post date:** [July 24, 2019, 10:42pm UTC](https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425/2 "2019-07-24T22:42:21Z")

</div>

> [@\_TWG](#):
>
> I need the certificate to be X.509

All Let's Encrypt certificates are X.509.

> [@\_TWG](#):
>
> Needs to be a UCC

UCC, as far as I know, is just a Microsoft-ism for a certificate with multiple domain names. Let's Encrypt certificates can have upto 100 names, so it checks that box as well.

> [@\_TWG](#):
>
> two wildcard domains

In order to generate wildcard certificates (and renew them automatically), you will need to use DNS validation. This means you will need to select a Let's Encrypt/ACME client that supports DNS validation, and your domains will need to use a DNS hosting provider that is supported by them.

Who is the DNS hosting provider for your two domains? Or do you run your own nameservers, and if so, what is the nameserver software you use?

> [@\_TWG](#):
>
> with any intermediate and root certs

You will get the intermediate with your certificate, but there is typically no need to get the root certificate as well - it is automatically determined by clients who connect. For what purpose do you need it? Which server software will you use this certificate with?

---

<div class="post-metadata">

**Author:** ![Phil](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/phil/32/76801_2.png) [@Phil](https://community.letsencrypt.org/u/Phil)\
**Post date:** [July 26, 2019, 2:35pm UTC](https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425/4 "2019-07-26T14:35:21Z")

</div>

Hi @_TWG,

There are several Windows clients listed at [https://letsencrypt.org/docs/client-options/](https://letsencrypt.org/docs/client-options/) that should be able to help you out.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [August 25, 2019, 2:35pm UTC](https://community.letsencrypt.org/t/can-i-issue-a-certificate-with-these-perameters/98425/5 "2019-08-25T14:35:24Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.