[openssl-users] How many SAN entries...?

[Blumenthal, Uri - 0553 - MITLL]

    > It’s been my understanding that a cert can contain as many SAN attributes as needed,
    > but it appears that Apple believes it has to be only one (because certificates with
    > more than one are not processed properly).
    
    Perhaps CAs have rarely issued email certificates with multiple email addresses. 
    
:-)

    OpenSSL will accept multiple email SANs and with email name checks will accept
    the certificate as valid so long as *one* of the addresses is a match.
 
Thank you! That’s what I expected and hoped for. Appreciate the help!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5211 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170426/0d7150c9/attachment.bin>