Contents
Can I have multiple certificates for the same domain?
You absolutely can use one SSL certificate for multiple domains — or one SSL certificate for multiple subdomains in addition to domains. For securing multiple domains with a single SSL certificate we use either a multi domain/UCC/SAN certificate or a multi domain wildcard SSL certificate.
Can you have multiple certificates?
There’s no mechanism that would stop you from issuing multiple certificates for the same domain. In fact, that’s what you do every time you renew your SSL certificate — you issue a new certificate while the old one is still active. So, at least for a while, you have two certificates for the same domain.
What is DN in a certificate?
Distinguished name (DN) is a term that describes the identifying information in a certificate and is part of the certificate itself. A certificate contains DN information for both the owner or requestor of the certificate (called the Subject DN) and the CA that issues the certificate (called the Issuer DN).
Can you have two certificate authorities?
You can have two certificates issued for the same domain and same server from different providers and it will cause no disruptions. This gives you time to install a new one and uninstall an older one without causing a lapse in security.
Can multiple domains have SSL certificates with same DN?
The problem is that currently, our CA does not support multiple certificates with same DN therefore, we want to include some unique information in each SSL certificate’s DN. If possible please provide name or link to the RFC / standard for further guidance. Can multiple domains have SSL certificates with the same DN issued by same CA?
Can a CA issue more than one Dn for the same certificate?
The DN MUST be unique for each subject entity certified by the one CA as defined by the issuer field. A CA MAY issue more than one certificate with the same DN to the same subject entity. Though it is possible, but I don’t think what you suggested is the best way.
Do you have to have a DN on a certificate?
Every certificate must contain an “issuer” field, which must be non-empty, and must contain a DN (see section 4.1.2.4 of the aformentioned RFC), which should unambiguously identify the CA (it can contain a serialNumber field, for example).
What happens if I have two SSL certificates installed?
What happens if I have two SSL certificates installed? When you install two SSL certificates on the same domain it forces the server to decide which one to serve. In some cases the server will send the most recently installed certificate to visiting browsers assuming it’s likely the most secure.