Confirm, administrator
5,526
edits
Changes
→DNS names go in SAN
According to the [https://www.cabforum.org/documents.html CA/Browser Forum Baseline Requirements:]
* BR #9.2.1 (section 7.1.4.2.1 in BR version 1.3), Subject Alternative Name Extension
** Required/Optional: '''Required'''
** Contents: This extension MUST contain at least one entry. Each entry MUST be either a dNSName containing the Fully-Qualified Domain Name or an iPAddress containing the IP address of a server.
* BR #9.2.2(section 7.1.4.2.2 in BR version 1.3) , Subject Common Name Field
** Required/Optional: '''Deprecated (Discouraged, but not prohibited)'''
** Contents: If present, this field MUST contain a single IP address or Fully-Qualified Domain Name that is one of the values contained in the Certificate’s subjectAltName extension (see Section 9.2.1- or section 7.1.4.2.1 in BR version 1.3).
=== Domain owned by a Natural Person ===
