How to setup SSL?

Question

I have been now researching since two days and can't find a clear answer.

I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to activate the SSL, is this carved in the stone for the entire year? What if I have a typo in CN (common name) etc? Would I be able to change it and resend the CSR again?
I can't find a clear answer what a fully-qualified domain name is. Most claim it should be example.com but others claim it has to have a trailing dot -> example.com. otherwise it could still be vulnerable to ma in between attacks.
During generation of CSR, I could also select if the SSL is used for Intel® vPro. I think this only makes sense if the SSL is used for secured remote desktop otherwise for plain e-commerce this option is pointless, is this correct?

Thank you

Vlad · Answer 1 · 2011-12-19 20:12:45Z

up vote 4 down vote accepted

answered Dec 19 '11 at 20:12

Vlad
4088

	Thanks Vlad, so a complete name could be also example.com as well as subdomain.example.com, correct? – Kave Dec 19 '11 at 20:18
	That's correct Kave – Darius Dec 19 '11 at 20:22
	I recently went thru getting my ssl for owa and after obtaining it i was able to import it via MS Exchange PowerShell – Darius Dec 19 '11 at 20:24
	@Kave both subdomain.example.com and example.com names can be fully-qualified as long as the name uniquely identifies the host/server/device. – Vlad Dec 20 '11 at 8:00

feedback

1 Answer