Ooops, my fault! I've read and replied too fast (maybe because it's Monday? :-))
Of course this shouldn't be done with *two domain names* only with
two host names in the same domain... I suppose it won't work in
actual browsers but if it does I let you all know...

Sorry
Jan

Hassan Schroeder schrieb:
> On Feb 11, 2008 5:00 AM, Jan Mönnich <[EMAIL PROTECTED]> wrote:
> 
>> You can get one certificate with both domain names in the "Subject
>> Alternative Name" of the Certificate. All modern browsers can handle that
>> and you can use just one Certificate for both domains. That's the
>> workaround we are recommending to all of our customers.
> 
> Have you actually seen this deployed?
> 
> I ask because I've only seen Subject Alternative Name used as e.g.
>  foo.example.com, bar.example.com -- never two *domain* names.
> 
> If that really works, it'd be good to know :-)
> 

-- 
Dipl.-Inf. (FH) Jan Mönnich, PKI Team
Phone: +49 40 808077-632, Fax: +49 40 808077-556, [EMAIL PROTECTED]

DFN-CERT Services GmbH, https://www.dfn-cert.de, Phone +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737
Sachsenstraße 5, 20097 Hamburg/Germany, CEO: Dr. Klaus-Peter Kossakowski

15 Jahre DFN-CERT + 15. DFN-Workshop "Sicherheit in vernetzten Systemen"
am 13./14. Februar 2008 im CCH Hamburg - https://www.dfn-cert.de/ws2008/


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to