We want to use a SAN SSL certificate for the following domains:
- example.com (common name)
When creating the CSR for this certificate, do I have to enter all these hostnames (beside the Common Name) into the Subject Alternative Names section? Is it required? Or can I leave them empty and only fill out the Common Name?
How do these SAN entries eventually get into the SSL certificate? Is this through the CSR (if they've been provided) or can a certificate provider add them during the generation process, and thus the SANs are not required in the CSR?