Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new certificate) to allow multiple hostnames.

share|improve this question

migrated from stackoverflow.com Nov 12 '11 at 6:50

This question came from our site for professional and enthusiast programmers.

up vote 5 down vote accepted

You can't.

If the certificate is self-signed (i.e. you generated it), then you can try to re-create it with existing key pair and other attributes, but even then if some application has saved hashes of the old certificate, it will complain that you have changed certificates.

If the certificate is not yours, then forget it.

share|improve this answer
+1: The signing of the certificate locks it in place (via a cryptographic hash) and any changes would need to be re-signed. – Donal Fellows Nov 11 '11 at 14:30
then, can i create a new certificate, specifying the thumbprint that i wanted? – Esteban Lopez Nov 11 '11 at 14:32
@EstebanLopez no, you can't. The purpose of the hash and of certificate signature is to ensure integrity of the certificate. And you want to hack the certificate. That won't work. – Eugene Mayevski 'EldoS Nov 11 '11 at 14:36
thanks a lot my friend – Esteban Lopez Nov 11 '11 at 14:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.