Suppose 1st level intermediate cert specifies
Can 2nd level intermediate cert which is signed by the 1st level specify
DNS=*.dev.com or maybe
Does certificate level affect SAN in any way?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
In a given setup -- it is working configuration. Subject Alternative Names are constrained through different means -- Name Constraints extension in CA certificate. If you do not use Name Constraints, you can use whatever name you want in any certificate.