confirmed, i've seen dozens on one cert - far more preferable to do that and have such numbers than a single wildcard cert (which has issues on all sorts of platforms for various purposes).
alan On 26 April 2017 at 18:24, Blumenthal, Uri - 0553 - MITLL <u...@ll.mit.edu> wrote: > > It’s been my understanding that a cert can contain as many SAN > attributes as needed, > > but it appears that Apple believes it has to be only one (because > certificates with > > more than one are not processed properly). > > Perhaps CAs have rarely issued email certificates with multiple email > addresses. > > :-) > > OpenSSL will accept multiple email SANs and with email name checks will > accept > the certificate as valid so long as *one* of the addresses is a match. > > Thank you! That’s what I expected and hoped for. Appreciate the help! > > > -- > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users > -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users