SAN sort order?

It will reject duplicates in the API itself, but you can submit a CSR at finalization time that contains duplicate SANs, and it won’t complain - it will just normalize them.

I did so in this post, but since the CAA re-checking bug and subsequent fixes, things might have changed.

1 Like