Tell me more ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.
up vote 1 down vote favorite

I've been investigating and I found instructions on how to create an SSL certificate with multiple hostnames, but I need to know whether I can modify an existing certificate (not create a new certificate) to allow multiple hostnames.

share|improve this question

migrated from stackoverflow.com Nov 12 '11 at 6:50

1 Answer

up vote 5 down vote accepted

You can't.

If the certificate is self-signed (i.e. you generated it), then you can try to re-create it with existing key pair and other attributes, but even then if some application has saved hashes of the old certificate, it will complain that you have changed certificates.

If the certificate is not yours, then forget it.

share|improve this answer
+1: The signing of the certificate locks it in place (via a cryptographic hash) and any changes would need to be re-signed. – Donal Fellows Nov 11 '11 at 14:30
then, can i create a new certificate, specifying the thumbprint that i wanted? – Esteban Lopez Nov 11 '11 at 14:32
@EstebanLopez no, you can't. The purpose of the hash and of certificate signature is to ensure integrity of the certificate. And you want to hack the certificate. That won't work. – Eugene Mayevski 'EldoS Corp Nov 11 '11 at 14:36
thanks a lot my friend – Esteban Lopez Nov 11 '11 at 14:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.