I have been now researching since two days and can't find a clear answer.
I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to activate the SSL, is this carved in the stone for the entire year? What if I have a typo in CN (common name) etc? Would I be able to change it and resend the CSR again?
I can't find a clear answer what a fully-qualified domain name is. Most claim it should be example.com but others claim it has to have a trailing dot -> example.com. otherwise it could still be vulnerable to ma in between attacks.
During generation of CSR, I could also select if the SSL is used for Intel® vPro. I think this only makes sense if the SSL is used for secured remote desktop otherwise for plain e-commerce this option is pointless, is this correct?