[openssl-users] How many SAN entries...?

Salz, Rich rsalz at akamai.com
Wed Apr 26 17:08:58 UTC 2017


> A naïve question. A certificate that contains SAN attribute(s) – is there a limit on how many, say, RFC822 SAN attributes can a valid certificate have? 

No.

> It’s been my understanding that a cert can contain as many SAN attributes as needed, but it appears that Apple believes it has to be only one (because certificates with more than one are not processed properly).

I can guess at, and understand, their reasoning -- it allows mail spoofing and stealing.  And the use of such certs is not common. 


More information about the openssl-users mailing list