Can I add SAN to existing certificate?

Can I add SAN to existing certificate?

Anytime a SAN is added to an existing cert, a new CSR is required. The CSR must contain all the existing as well as new SANs. Consult your server manual for instructions on how to add SANs to the CSR. The common name for the CSR must be the same as the original certificate.

How do I add SANs to an existing SSL certificate?

Add SANs to your multi-domain certificate

1. Step 1: Generate CSR.
2. Step 2: Sign in to your account.
3. Step 3: Fill out the reissue form.
4. Step 4: Complete domain control validation (DCV)
5. Step 5: DigiCert reissues the multi-domain SSL/TLS certificate.
6. Step 6: Install your reissued SSL/TLS certificate.

How do I add a Subject Alternative Name to a secure LDAP certificate?

How to add a Subject Alternative Name to a secure LDAP…

1. Open Internet Explorer.
2. Click Request a Certificate.
3. Click Advanced certificate request.
4. Click Create and submit a request to this CA.
5. In the Certificate Template list, click Web Server.
6. Provide identifying information as required.

How do you add a Subject Alternative Name?

Adding Subject Alternative Name (SAN) to a digital certificate

1. Open the hosts.
2. Add the loop back addresses and the host names.
3. Verify if the hosts were added, by pinging each host in the Command prompt.
4. Create a copy of the pscpki.

How do you add a SAN name to a certificate?

To submit a certificate request that contains a SAN to an enterprise CA, follow these steps:

1. Open Internet Explorer.
2. Click Request a Certificate.
3. Click Advanced certificate request.
4. Click Create and submit a request to this CA.
5. In the Certificate Template list, click Web Server.

How to request a certificate with custom subject alternative name Sans?

How to Request a Certificate With a Custom Subject Alternative Name SANs can be included in the [Extensions] section. For examples, see the sample .inf file. Save the file as Request.inf. Open a command prompt.

Can you add a San to an existing certificate?

You cannot alter an existing certificate in any way. That will be missing the point of adding a cryptographically signing the certificate. If you want to add SAN, most CAs allow you to reissue a certificate with new details, though this will usually revoke your old certificate.

Is there a way to change an already issued certificate?

There is no way to change an already issued certificate since this would invalidate the signature. You can also not issue a new certificate using the certificate you have since this server certificate has basic constraints CA false, i.e. can only be used as leaf certificate and not to sign other certificates.

How to create and submit a certificate request?

To use the Certreq.exe utility to create and submit a certificate request, follow these steps: Create an.inf file that specifies the settings for the certificate request. To create an.inf file, you can use the sample code in the Creating a RequestPolicy.inf file section in How to Request a Certificate With a Custom Subject Alternative Name.