Wildcard CSR SAN names about certes

[batooo]

This is working:

Order: *.example.com, example.com
CSR CN: example.com
Result:
Certificate CN: example.com
Certificate SAN: *.example.com, example.com

[fszlin]

When using CsrInfo, it simply puts the names you specified in the order.

Have you try creating the CSR with CertificationRequestBuilder? You can add both names in and see if LE would issue the certificate.

[batooo]

If the order is for *.example.com and CSR CN is example.com = Order includes different number of names than CSR specifies.

If the order is for *.example.com and CSR CN is *.example.com = works but certificate does not have example.com as SAN.

I cannot use CertificationRequestBuilder for v2? Finalize method accept only CsrInfo but CsrInfo does not have SAN property.

I haven't tried to make an order with both hostnames, *.example.com & example.com.

Similar post here: https://community.letsencrypt.org/t/wildcard-names-incomplete/54525/7

[fszlin]

That's great.

You can also use CertificationRequestBuilder for v2 to fine tune the CSR, see here for example.