Solved

Godaddy and sun certificate: new feedback on UCC

Posted on 2013-01-04
1
489 Views
Last Modified: 2013-01-04
Hi
Do you know if goddady permits with the Multiple Domains UCC  to add 5 total names to one certificate.

Typically I want this list of names (with external and internal server and dns):

    SERVERNAME

    SERVERNAME.COMPANY.LOCAL

    AUTODISCOVER.COMPANY.COM

    MAIL.COMPANY.COM

Thanks,

Regards,

Fabien
0
Comment
Question by:simlip
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 58

Accepted Solution

by:
tigermatt earned 255 total points
ID: 38744128
A Subject Alternative Name (SAN), also known as Unified Communications (UC), certificate does allow multiple names. The maximum number of names you can add depends on whatever limit the provider enforces. At GoDaddy, you can buy a UC certificate which supports 5 names, or 10 names and so on.

If you purchase a 5 name certificate, then you can certainly list the above 4 names quite happily on that certificate. You will want to specify mail.company.com as the Common Name ("CN") of the certificate, and the other three names as the alternative names. This maximises support for any older devices which do not support SAN certificates, as they will typically just read the common name.

You should certainly be cognisant of the fact that "intranet" names, such as .local, .lan, .internal etc are not going to be permitted on SSL certificates beyond 2016 - and GoDaddy will actively prohibit you from purchasing one if the expiry will be after November 2015. The SSL certificate industry opted to eliminate intranet names, so your inclusion of "SERVERNAME" and "SERVERNAME.COMPANY.LOCAL" may not work depending on the length of the certificate you purchase. If Exchange is properly configured and the necessary changes to DNS have been made, then those names are certainly not required, and you can simply add autodiscover.company.com and mail.company.com to your certificate. You MUST have made the proper settings changes to the URLs Exchange is using, and ensure those can be properly resolved, for this to work though.

-Matt
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question