Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm attempting to add a SSL certificate from GoDaddy to my server and every time I generate CSR key and submit it to GoDaddy, I receive the following response: "You must use a fully-qualified domain name for a Premium Certificate Request."

What steps do I need to take to ensure my domain is full qualified? Could it also be an issue with the way my server is configured?

share|improve this question
"For example, given a device with a local hostname myhost and a parent domain name, the fully qualified domain name is The FQDN therefore uniquely identifies the device —while there may be many hosts in the world called myhost, there can only be one In the Domain Name System, and most notably, in DNS zone files, a fully qualified domain name is specified with a trailing dot. For example, specifies an absolute domain name that ends with an empty top level domain label." – zneak Jul 17 '11 at 20:47
In order to help you further, we really need to know what you're entering as your domain name so we can tell you what to enter. – Mark Henderson Jul 17 '11 at 21:48
up vote 4 down vote accepted

Probably you give the wrong data into the process of the CSR-generation. The FQDN of the Domain you want to protect needs to be filled in the CN-Field.

Assuming that you use linux and openssl and the domain you wanna get an SSL-Cert for is "" (SSL-Cert with www.):

$ openssl req -new -nodes -keyout mycooldomain_com.key -out mycooldomain_com.csr -newkey rsa:2048

Then you hit enter and have to fillout the required fields:

Generating a 2048 bit RSA private key
writing new private key to 'mycooldomain_com.key'
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
Country Name (2 letter code) [AU]:CH
State or Province Name (full name) [Some-State]:Bern
Locality Name (eg, city) []:Bern
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Your Name / Company
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []
Email Address []

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Country for me is CH, my State is Bern, City Bern too, the name of You or your Company, Section is empty for me and then as Common Name, the FQDN you wanna protect.

share|improve this answer
You totally got it right, I was entering the CN wrong. Thanks! – mike Jul 17 '11 at 23:08
Thanks for this. When it prompted me for "Common Name (eg, YOUR name)" , I of course, entered "Adrian Carr", since that's what it seemed to be asking for. – Adrian Carr Jun 20 '15 at 15:23

A fully qualified domain name means the full domain name. For example if you were to submit a request for serverfault the Fully Qualified Domain Name would be "". It simply means the full name. If you were talking about a particular server in a domain, the FQDN would be the server name plus the domain. For example, or Srv1.domain.local.

What is the name you are attempting to use?

share|improve this answer
No, it means more than just the full name. There is nothing preventing me from taking and prepending it to each entry in the local domain search list in turn and using that instead. – Ignacio Vazquez-Abrams Jul 17 '11 at 20:52

Put a period after it. Without a period, it can be interpreted as a local hostname. ->
share|improve this answer

Nothing special. Let's say your domain is then everything NOT is a full-qualified domain name. For example or is one.

share|improve this answer is a FQDN too. – Iain Jul 17 '11 at 20:56

You don't need to qualify your domain name. You need to use your fully qualified domain name. That means, you need to use the full DNS address that includes hostname, any subdomains (if their are any), domain name, and tld followed by a period. Something like this:

host would be the hostname, domain would be the domain name, and com would be the tld.

For more information, try checking out

share|improve this answer

In my case domain was registered on godaddy.

I picked the whole domain name from there and paste it in console.


Although Godaddy documentation says that you need to add www.mydomain but that did not worked.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.