Subject Alternative

[rogeriojlle (Rogerio Scholz Machado)]

in acme.sh when I use this syntax for example:

acme.sh --issue -d example.com -d supersite.com -d anothersite.net

I have a certificate for example.com and with alternate subject field filled in for the other sites for each “-d othersite” i put.

like this:

What is the Caddy equivalent of this like?

Caddy version: 2.4.6 OS Linux

[emilylange]

Hi

@rogeriojlle

Caddy version: 2.4.6 OS Linux

Please update to caddy v2.5.1, which has been released 14 days ago
v2.4.6 is fairly old

---

Regarding your actual question about multiple SAN (Subject Alternate Name) per certificate:

No, caddy will only issue certificates with exactly one SAN, not multiple.
If you want to know a bit more why, check this post here:

Combine two wildcard domains into single certificate

For managed certificates, Caddy always uses 1 subject per certificate. There are numerous reasons this is considered a best practice: X.509v3 certificates can use extensions, one of which is Subject Alternative Name (SAN). The client provides a list of names to be validated when requesting a certificate, and the names which are validated by the CA are added as SANs. Although it is possible to map many names to one certificate (M:1), a one-to-one (1:1) mapping is recommended. 1:1 is easy to m…

That specific post goes quite in depth, but feel free to read the whole thread