0

Suppose 1st level intermediate cert specifies DNS=www.dev.com

Can 2nd level intermediate cert which is signed by the 1st level specify DNS=*.dev.com or maybe DNS=*.dev2.com?

Does certificate level affect SAN in any way?

1 Answer 1

2

In a given setup -- it is working configuration. Subject Alternative Names are constrained through different means -- Name Constraints extension in CA certificate. If you do not use Name Constraints, you can use whatever name you want in any certificate.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .