Add SANs to your multi-domain SSL/TLS certificate

Reissue your multi-domain SSL/TLS certificate to add subject alternative names (SANs)

DigiCert multi-domain certificates come with unlimited reissues. So when needed, you can add SANS to your certificate.

Adding SANs to your multi-domain SSL/TLS certificate may incur additional costs.

You can also change the common name, change the order of SANS, remove SANs, change SANs, and add SANS.

Removing and changing domains on a multi-domain SSL/TLS certificate will revoke the original certificate and any of its duplicate certificates. See Reissue an SSL/TLS certificate.

Add SANs to your multi-domain certificate

Step 1: Generate CSR

To add SANs to your multi-domain SSL/TLS certificate, you need to reissue your certificate. When reissuing an SSL/TLS certificate, you’ll need to generate a new CSR. For more information about creating a CSR, see our Create a CSR (Certificate Signing Request) page.

Step 2: Sign in to your account

Sign in to CertCentral.

Step 3: Fill out the reissue form

  1. in your CertCentral account, in the left main menu, click Certificates > Orders.

  1. On the Order page, locate and click the order number for the multi-domain or EV multi-domain SSL/TLS certificate you want to add SANs to.

  1. On the Order details page, in the Certificate Actions dropdown, select Reissue Certificate.

  1. On the Reissue Certificate for Order page, fill out the form:

    • Add your CSR
    • Add SANs
    • Select payment method, signature hash, and server platform
    • Add a reason for the reissue.

You are only charged if adding SANs occurs additional costs.

  1. When you are done, click Request Reissue.

Step 4: Complete domain control validation (DCV)

If you added any new, unvalidated domains to the certificate reissue request (common name or SANs), you’ll need to demonstrate control over those domains before DigiCert can reissue the certificate. See Demonstrate control over domains on a pending certificate order.

Step 5: DigiCert reissues the multi-domain SSL/TLS certificate

Once approved, we reissue and send the reissued certificate to the certificate contact in an email. You can also download the reissued certificate from your account. See Download a certificate from your account.

Step 6: Install your reissued SSL/TLS certificate

Install and configure the new certificate. For more information about installing your certificate, see our SSL Certificate Installation Instructions & Tutorials page.

About

DigiCert is the world's leading provider of scalable TLS/SSL, IoT and PKI solutions for identity and encryption. The most innovative companies, including 89% of the Fortune 500 and 97 of the 100 top global banks, choose DigiCert for its expertise in identity and encryption for web servers and Internet of Things devices. DigiCert supports TLS and other digital certificates for PKI deployments at any scale through its certificate lifecycle management solution, CertCentral®. The company is recognized for its enterprise-grade certificate management platform, fast and knowledgeable customer support, and market-leading security solutions. For the latest DigiCert news and updates, visit digicert.com or follow @digicert.

©2020 DigiCert, Inc. All rights reserved. DigiCert, its logo and CertCentral are registered trademarks of DigiCert, Inc. Norton and the Checkmark Logo are trademarks of NortonLifeLock Inc. used under license. Other names may be trademarks of their respective owners.