up vote 1 down vote favorite
share [g+] share [fb]

i've been investigating and i found this link that teaches how to Create an SSL Certificate with Multiple Hostnames but i need to know if can i modify (Not Create) an existing certificate to allow multiple hostname

link|improve this question
feedback

migrated from stackoverflow.com Nov 12 '11 at 6:50

This question came from our site for professional and enthusiast programmers.

1 Answer

up vote 4 down vote accepted

You can't.

If the certificate is self-signed (i.e. you generated it), then you can try to re-create it with existing key pair and other attributes, but even then if some application has saved hashes of the old certificate, it will complain that you have changed certificates.

If the certificate is not yours, then forget it.

link|improve this answer
+1: The signing of the certificate locks it in place (via a cryptographic hash) and any changes would need to be re-signed. – Donal Fellows Nov 11 '11 at 14:30
then, can i create a new certificate, specifying the thumbprint that i wanted? – Esteban Lopez Nov 11 '11 at 14:32
@EstebanLopez no, you can't. The purpose of the hash and of certificate signature is to ensure integrity of the certificate. And you want to hack the certificate. That won't work. – Eugene Mayevski 'EldoS Corp Nov 11 '11 at 14:36
thanks a lot my friend – Esteban Lopez Nov 11 '11 at 14:40
feedback

Your Answer

 
or
required, but never shown
discard