To generate CSR file which includes more than one Fully Qualified Domain Name, you need to generate a CSR with several commonName (CN) gaps.
Note: This instruction is for Unix system users.
In Unix you can generate it using OpenSSL configuration file
Edit the "/etc/ssl/openssl.cnf" file (this may be different)
[ req ]
default_bits = 2048
prompt = no
encrypt_key = no
default_md = sha1
distinguished_name = dn
[ dn ]
C = IE
O = Official name of your institution
0.CN = First FQDN of your server
1.CN = Second FQDN of your server
2.CN = Third FQDN of your server
# ... add as much as you need
The principal FQDN should appear as the first CN (0.CN= ) because only this one will be kept in the subject of the certificate. The other CN will be transfered to the subjectAltName field in the generated certificate.
There is also the option for openssl with Command Line, examples:
- servers with existing private key openssl req -new -key myserver.key -out myserver.csr -subj "/C=IE/O=inst_name/CN=first_fqdn/CN=second_fqdn/CN=third_fqdn" -text - create private key and CSR with multiple CN names openssl req -new -newkey rsa:2048 -keyout myserver.key -out myserver.csr -subj "/C=IE/O=inst_name/CN=first_fqdn/CN=second_fqdn/CN=third_fqdn" -text
cyber_Folks S.A. – Cookie settings
Do you like good cookies? We too! Some cookies are required for the website to function properly. Also accept additional cookies related to service performance, social networking and marketing. Cookies are also used to personalize ads. Thanks to them, you will get the best experience of our website, which we are constantly improving. The consent granted voluntarily may be withdrawn or modified at any time. More information about the cookies used can be found in our privacy policy. If you prefer to specify your preferences precisely - see the types of cookies below.