Here’s a theoretical scenario that I came up with recently while playing around with a CDN provider. I’ve noticed that some companies that use Let’s Encrypt to generate customer certificates will put multiple customers’ subdomains on the same certificate (the two that I’ve encountered so far are Sm…

[image] Proving any or all identifier for certificate revocation This situation would meet the bar for administrative revocation by Let’s Encrypt. From Proving any or all identifier for certificate revocation - #4 by cpu

Inability to revoke based on a Subject Alternative Name

Issuance Policy

tdelmas February 27, 2020, 10:54pm 2

From Proving any or all identifier for certificate revocation - #4 by cpu

Topic		Replies	Views
Proving any or all identifier for certificate revocation Issuance Policy	3	996	February 13, 2020
Revoke certificate generated by a compromised host or DNS Help	11	1224	July 14, 2022
How to revoke a certificate without account key or email Help	8	6075	November 1, 2016
Rate limit question Issuance Policy	13	3122	October 3, 2017
Where come the Alternative Names from? Help	2	506	July 28, 2020

Inability to revoke based on a Subject Alternative Name

Related topics