add altname extension only when needed #49

Closed
opened 2025-12-29 00:23:31 +01:00 by adam · 2 comments
Owner

Originally created by @bjacke on GitHub (Feb 4, 2016).

when there is just one domain name configured for a certificate, the CSR shoud be done without altname extension. Currelty requesting a cert for

foo.example.com

will result in
X509v3 Subject Alternative Name:
DNS:foo.example.com

being added to the CSR and in the resulting certificate.

Originally created by @bjacke on GitHub (Feb 4, 2016). when there is just one domain name configured for a certificate, the CSR shoud be done without altname extension. Currelty requesting a cert for foo.example.com will result in X509v3 Subject Alternative Name: DNS:foo.example.com being added to the CSR and in the resulting certificate.
adam closed this issue 2025-12-29 00:23:31 +01:00
Author
Owner

@lukas2511 commented on GitHub (Feb 5, 2016):

Is that bad in any way?

@lukas2511 commented on GitHub (Feb 5, 2016): Is that bad in any way?
Author
Owner

@bjacke commented on GitHub (Feb 5, 2016):

On 05.02.2016 15:59, Lukas Schauer wrote:

Is that bad in any way?

it's not exactly bad - it's just superfluous, makes the cert some bytes
larger for no reason. No big deal if you don't want to change this.

@bjacke commented on GitHub (Feb 5, 2016): On 05.02.2016 15:59, Lukas Schauer wrote: > Is that bad in any way? it's not exactly bad - it's just superfluous, makes the cert some bytes larger for no reason. No big deal if you don't want to change this.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/dehydrated#49