I have few questions related to DN in SSL Certificates,
Can multiple domains have SSL certificates with the same DN issued by same CA?
Is it ok for a single domain to have multiple SSL certificates with same DN and validity?
- Can we include CA related information (serial number, name or id etc) in the attribute of SSL certificate DN? e.g. cn=user001,ou=SSL,ou=001,o=DS,c=US. If it is possible then which attribute is better to use for this purpose ou, sn or other? The problem is that currently, our CA does not support multiple certificates with same DN therefore, we want to include some unique information in each SSL certificate's DN.
If possible please provide name or link to the RFC / standard for further guidance.