[openssl-users] How many SAN entries...?

Blumenthal, Uri - 0553 - MITLL uri at ll.mit.edu
Wed Apr 26 17:24:13 UTC 2017

    > It’s been my understanding that a cert can contain as many SAN attributes as needed,
    > but it appears that Apple believes it has to be only one (because certificates with
    > more than one are not processed properly).
    Perhaps CAs have rarely issued email certificates with multiple email addresses. 

    OpenSSL will accept multiple email SANs and with email name checks will accept
    the certificate as valid so long as *one* of the addresses is a match.
Thank you! That’s what I expected and hoped for. Appreciate the help!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5211 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170426/0d7150c9/attachment.bin>

More information about the openssl-users mailing list