Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking at getting an SSL certificate and I think the SAN type is what I need. However, Can I easily add further domain names to be covered by the certficate in the future. E.g. I have on my server. In 6 months time I decide to build and host a new site on the same server and give it the URL Would I then be able to add the new domain to the existing certificate?

share|improve this question
up vote 2 down vote accepted

Certificates cannot be changed after they are signed, otherwise they would provide no security.

share|improve this answer

Once issued, a certificate holds all SANs. This means that a certificate would have to be revoked and a new one has to be issued to add a new SAN.

You should first find out which names you want to register, because revoking and reissueing will most likely cost extra money.

share|improve this answer

Its not possible to add domain in the existing SAN SSL Certificate, you can temporarily self-signed the certificate for the other domain you are thinking for and then at the time of expiration(after 1 or 2 year validity) you have to apply a new SAN to include your new domain name.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.