• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Feature-Request: "SubjectAlternativeNames" in CSR (X509 V3)

cyberjunk

New Pleskian
Where:
Plesk UI -> "Add SSL Certificate"

What:
It is possible to provide "alternative" names in certificates and their CSRs (additional to the main FQDN which is read from the "Domain name" in the plesk UI).

It's NOT supported by all CA/any cheap certificate.

It's well described here:
http://apetec.com/support/GenerateSAN-CSR.htm

I would like the UI being improved to allow entering subect alternative values which then will be included in the CSR or selfsigned certificate.

Benefits:
(a) This could be useful for professional users with expansive wildcard certificates (*.company.com). It's common to integrate the rootdomain (company.com) as an alternative name in such. Otherwise using a *.company.com certificate on company.com usually gives issues.
(b) This can improve the quality of self-signed certificates. Of course they will still warn the users about being self-signed, but the additional warning about being not correct for the destination they entered (e.g. they opened company.com instead of www.company.com) would disappear.

PS: cPanel seems to support it ;-)
 
Last edited:
Back
Top