[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

Godaddy and sun certificate: new feedback on UCC

Posted on 2013-01-04
1
Medium Priority
?
492 Views
Last Modified: 2013-01-04
Hi
Do you know if goddady permits with the Multiple Domains UCC  to add 5 total names to one certificate.

Typically I want this list of names (with external and internal server and dns):

    SERVERNAME

    SERVERNAME.COMPANY.LOCAL

    AUTODISCOVER.COMPANY.COM

    MAIL.COMPANY.COM

Thanks,

Regards,

Fabien
0
Comment
Question by:simlip
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 58

Accepted Solution

by:
tigermatt earned 1020 total points
ID: 38744128
A Subject Alternative Name (SAN), also known as Unified Communications (UC), certificate does allow multiple names. The maximum number of names you can add depends on whatever limit the provider enforces. At GoDaddy, you can buy a UC certificate which supports 5 names, or 10 names and so on.

If you purchase a 5 name certificate, then you can certainly list the above 4 names quite happily on that certificate. You will want to specify mail.company.com as the Common Name ("CN") of the certificate, and the other three names as the alternative names. This maximises support for any older devices which do not support SAN certificates, as they will typically just read the common name.

You should certainly be cognisant of the fact that "intranet" names, such as .local, .lan, .internal etc are not going to be permitted on SSL certificates beyond 2016 - and GoDaddy will actively prohibit you from purchasing one if the expiry will be after November 2015. The SSL certificate industry opted to eliminate intranet names, so your inclusion of "SERVERNAME" and "SERVERNAME.COMPANY.LOCAL" may not work depending on the length of the certificate you purchase. If Exchange is properly configured and the necessary changes to DNS have been made, then those names are certainly not required, and you can simply add autodiscover.company.com and mail.company.com to your certificate. You MUST have made the proper settings changes to the URLs Exchange is using, and ensure those can be properly resolved, for this to work though.

-Matt
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Are you looking for the options available for exporting EDB files to PST? You may be confused as they are different in different Exchange versions. Here, I will discuss some options available.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question