KOV_VZW
asked on
Multiple csr in 1 certificate
Hi Guys,
Is it possible to have multiple CSR's in one certificate?
Situation:
* In our local domain we have an wificontroller and printmanagement software we want to set to https. Both need csr for creation. Possible in 1 certificate?
Thanks 4 helping out!
Kind regards,
Alex
Is it possible to have multiple CSR's in one certificate?
Situation:
* In our local domain we have an wificontroller and printmanagement software we want to set to https. Both need csr for creation. Possible in 1 certificate?
Thanks 4 helping out!
Kind regards,
Alex
ASKER
Hi Gaurav,
thanks for the reply!
The wificontroller and the printmonitoringsoftware will be in the same local domain and they can both generate a CSR file.
So the question is: can we use 2 CSR files in 1 certificate? Or do we need 2 certificates?
Thnx 4 commenting
thanks for the reply!
The wificontroller and the printmonitoringsoftware will be in the same local domain and they can both generate a CSR file.
So the question is: can we use 2 CSR files in 1 certificate? Or do we need 2 certificates?
Thnx 4 commenting
Hi are you looking for Internal Certificate or Internal? If your domain is same. you can use single CSR for both Certificates. but it also depends on the Device how it takes it..
Your question is confusing.
First local only (non-routable) IPs can't really be covered by SSL certs, as the cert generation process (for most cert systems) requires a validation of host/domain DNS lookup to public IP, then placing a challenge file on that IP + then verifying the challenge file shows up.
In Registrar cases, if you own the domain through the Registrar + purchase a Registrar cert, this step may be skipped.
Your goal appears to be...
In our local domain we have an wificontroller and printmanagement software we want to set to https.
Then later you say...
The wificontroller and the printmonitoringsoftware will be in the same local domain.
I think you may be misunderstanding how HTTPS coverage works.
If both of these are referenced by the same IP, then likely they'll have the same host records... like...
wifi.foo.com + print.foo.com
So, they'd both be covered by the same SSL cert.
Also, SSL certs only cover certain protocols, like HTTP + IMAP + POP3 + SMTP authenticated mail submission.
So certs don't cover software, they cover certain types of software where server config will integrate an SSL cert + then clients are SSL aware + will connect to SSL, when possible, like a Chrome browser or Email client.
If you're trying to cover your WiFi Web interface, when your WiFi device requires some way to upload an SSL cert into your device.
Same with your print system, whether it's a device or software daemon, it will require some way to integrate an SSL cert.
First local only (non-routable) IPs can't really be covered by SSL certs, as the cert generation process (for most cert systems) requires a validation of host/domain DNS lookup to public IP, then placing a challenge file on that IP + then verifying the challenge file shows up.
In Registrar cases, if you own the domain through the Registrar + purchase a Registrar cert, this step may be skipped.
Your goal appears to be...
In our local domain we have an wificontroller and printmanagement software we want to set to https.
Then later you say...
The wificontroller and the printmonitoringsoftware will be in the same local domain.
I think you may be misunderstanding how HTTPS coverage works.
If both of these are referenced by the same IP, then likely they'll have the same host records... like...
wifi.foo.com + print.foo.com
So, they'd both be covered by the same SSL cert.
Also, SSL certs only cover certain protocols, like HTTP + IMAP + POP3 + SMTP authenticated mail submission.
So certs don't cover software, they cover certain types of software where server config will integrate an SSL cert + then clients are SSL aware + will connect to SSL, when possible, like a Chrome browser or Email client.
If you're trying to cover your WiFi Web interface, when your WiFi device requires some way to upload an SSL cert into your device.
Same with your print system, whether it's a device or software daemon, it will require some way to integrate an SSL cert.
Also, if you use https://LetsEncrypt.org, providing free certs for years now, then the LE client handles all CSR generation details.
I haven't generated a manual CSR file in years, since LE handles this auto magically.
I haven't generated a manual CSR file in years, since LE handles this auto magically.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
OK
Technically its not possible to create 1 CSR for multiple devices, you need to create separate CSR for each device you own in your environment.
But if you want to include multiple domain in single certificate, then you can go with SAN certificate.