Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been now researching since two days and can't find a clear answer.

  1. I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to activate the SSL, is this carved in the stone for the entire year? What if I have a typo in CN (common name) etc? Would I be able to change it and resend the CSR again?

  2. I can't find a clear answer what a fully-qualified domain name is. Most claim it should be but others claim it has to have a trailing dot -> otherwise it could still be vulnerable to ma in between attacks.

  3. During generation of CSR, I could also select if the SSL is used for Intel® vPro. I think this only makes sense if the SSL is used for secured remote desktop otherwise for plain e-commerce this option is pointless, is this correct?

Thank you

share|improve this question
up vote 4 down vote accepted
  1. You will need a new certificate if you want to change anything.

  2. A FQDN means a complete name: host.domain.tld

  3. You are right.

share|improve this answer
Thanks Vlad, so a complete name could be also as well as, correct? – Houman Dec 19 '11 at 20:18
That's correct Kave – Darius Dec 19 '11 at 20:22
I recently went thru getting my ssl for owa and after obtaining it i was able to import it via MS Exchange PowerShell – Darius Dec 19 '11 at 20:24
@Kave both and names can be fully-qualified as long as the name uniquely identifies the host/server/device. – Vlad Dec 20 '11 at 8:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.