Search code examples
sslcertificatex509tls1.2pkix

SAN certificates with same common name and different SAN entries


Is it possible to have two different certificates (RSA and DSA) to have the same common name but different SAN entries?

For example:

  • certificate1: type RSA CN=*.example.com SAN: *.example.ca, *.example.in
  • certificate2: type DSA CN=*.example.com SAN: *.example.ka, *.example.us

Solution

  • Certificates exists independent from each other. This means you can also have certificates which only partly overlap in CN and SAN because the existence of one of these certificates does not affect (and thus not exclude) the existence of the other one.