When I try to use the letsencrypt extension via the CLI, I am unable to get it to generate the correct SAN entry in the certificate for both domain.com and www.domain.com.
The CLI documentation suggests :
plesk bin extension --exec letsencrypt cli.php -d domain.com -d www.domain.com
but this seems to generate a cert that has a SAN value of just DNS Name=domain.com
Using the Let's Encrypt extension from the plesk GUI and selecting the option 'include a "www" subdomain for the domain and each selected alias' seems to work fine, and correctly generates a cert with a SAN value of DNS Name=domain.com,DNS Name=www.domain.com
It looks like someone has already discovered/reported this problem in GitHub : SAN support
On a separate note the above quote from the CLI Documentation is incorrect in its present form as it fails to indicate that the --email:-m <string> option is required, otherwise an error is returned.
The CLI documentation suggests :
plesk bin extension --exec letsencrypt cli.php -d domain.com -d www.domain.com
but this seems to generate a cert that has a SAN value of just DNS Name=domain.com
Using the Let's Encrypt extension from the plesk GUI and selecting the option 'include a "www" subdomain for the domain and each selected alias' seems to work fine, and correctly generates a cert with a SAN value of DNS Name=domain.com,DNS Name=www.domain.com
It looks like someone has already discovered/reported this problem in GitHub : SAN support
On a separate note the above quote from the CLI Documentation is incorrect in its present form as it fails to indicate that the --email:-m <string> option is required, otherwise an error is returned.