[openssl-users] How many SAN entries...?
Blumenthal, Uri - 0553 - MITLL
uri at ll.mit.edu
Wed Apr 26 17:24:13 UTC 2017
> It’s been my understanding that a cert can contain as many SAN attributes as needed,
> but it appears that Apple believes it has to be only one (because certificates with
> more than one are not processed properly).
Perhaps CAs have rarely issued email certificates with multiple email addresses.
:-)
OpenSSL will accept multiple email SANs and with email name checks will accept
the certificate as valid so long as *one* of the addresses is a match.
Thank you! That’s what I expected and hoped for. Appreciate the help!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5211 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170426/0d7150c9/attachment.bin>
More information about the openssl-users
mailing list