I have been now researching since two days and can't find a clear answer.

  1. I have purchased a Premium SSL certificate. Once I have created a Certificate Signing Request (CSR) and send it to them to activate the SSL, is this carved in the stone for the entire year? What if I have a typo in CN (common name) etc? Would I be able to change it and resend the CSR again?

  2. I can't find a clear answer what a fully-qualified domain name is. Most claim it should be example.com but others claim it has to have a trailing dot -> example.com. otherwise it could still be vulnerable to ma in between attacks.

  3. During generation of CSR, I could also select if the SSL is used for Intel® vPro. I think this only makes sense if the SSL is used for secured remote desktop otherwise for plain e-commerce this option is pointless, is this correct?

Thank you

  1. You will need a new certificate if you want to change anything.

  2. A FQDN means a complete name: host.domain.tld

  3. You are right.

| improve this answer | |
  • Thanks Vlad, so a complete name could be also example.com as well as subdomain.example.com, correct? – Houman Dec 19 '11 at 20:18
  • That's correct Kave – Darius Dec 19 '11 at 20:22
  • I recently went thru getting my ssl for owa and after obtaining it i was able to import it via MS Exchange PowerShell – Darius Dec 19 '11 at 20:24
  • @Kave both subdomain.example.com and example.com names can be fully-qualified as long as the name uniquely identifies the host/server/device. – Vlad Dec 20 '11 at 8:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.