Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking at getting an SSL certificate and I think the SAN type is what I need. However, Can I easily add further domain names to be covered by the certficate in the future. E.g. I have www.example.com on my server. In 6 months time I decide to build and host a new site on the same server and give it the URL www.example2.com. Would I then be able to add the new domain to the existing certificate?

share|improve this question
add comment

3 Answers 3

up vote 2 down vote accepted

Certificates cannot be changed after they are signed, otherwise they would provide no security.

share|improve this answer
add comment

Once issued, a certificate holds all SANs. This means that a certificate would have to be revoked and a new one has to be issued to add a new SAN.

You should first find out which names you want to register, because revoking and reissueing will most likely cost extra money.

share|improve this answer
add comment

Its not possible to add domain in the existing SAN SSL Certificate, you can temporarily self-signed the certificate for the other domain you are thinking for and then at the time of expiration(after 1 or 2 year validity) you have to apply a new SAN to include your new domain name.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.