Are you sure the wildcard cert for CN=*.domain.example should be with only one X509v3 Subject Alternative Name: DNS:*.domain.example and not be complete to cover the root domain itself like this: X509v3 Subject Alternative Name: DNS:*.domain.example DNS:domain.example I'm afraid certs…

Thank you guys, I got the point. I successfully received the cert for *.domain.example and domain.example using a .csr with cn=domain.example and both X509v3 Subject Alternative Name: DNS:domain.example, DNS:*.domain.example # INFO: Using main config file /etc/dehydrated/config + Requesting…

Wildcard names incomplete?

Issuance Tech

tdelmas March 1, 2018, 2:36pm 5

If you have a server that handle request for * .example.com and another for example.com it may create some security issues if you can't have a certificate valid only for "*.example.com".

1 Like

Topic		Replies	Views
ACME v2 - Wildcard Requests and SANs? Issuance Tech	5	2689	February 23, 2018
There is no root domain in the wildcard certificate Help	14	763	September 18, 2021
I'm told I need an exception Help	13	2582	June 24, 2018
CSR for SAN cert Help	5	926	August 26, 2018
Trouble validating a wildcard certificate Help	2	601	January 17, 2020

Wildcard names incomplete?

Related topics