Domain Name is redundant with wildcard domain

[flanga]

Hi,

we categorize our certificates per server and use the common name to tell on which server the certificate is deployed.

However, we want to issue wildcard certificates, but we receive an error message: The request message was malformed :: Error creating new order :: Domain name “” is redundant with a wildcard domain in the same request. Remove one or the other from the certificate request.

I know that both names are unnecessary, however we would like to keep it in that way - can we issue certificates with both names (by breaking the client ) or is this also forbidden by the Letsencrypt API?

Best regards,

[mdhardeman]

You can achieve this by adding two labels versus one.

Example:

server-001.management.example.com
*.example.com

Because *.example.com would not cover the other SAN, this would work.

[mdhardeman]

If your question is can you force it to issue overlapping labels, the answer is no. The API enforces that policy.

[flanga]

That was my question - servers are named with srv0001.example.com and we want to have *.example.com for coverage (so one certificate covers all domains hosted on that server).

[mdhardeman]

So you can have that, you just have to add an additional level to the name.

Like g1-001.srv.example.com

[flanga]

Okay, thank you 20 char…

[rg305]

Or you could also use another domain altogether for the specific label:
*.example.com
srv001.domains.org