Need to generate a CSR with SAN in IIS? Read the article to find out. At Bobcares, with our Server Management Service, we can handle your IIS issues.

How to Generate a CSR with SAN in IIS?

When we create a CSR (Certificate Signing Request) with SAN (Subject Alternative Names) in IIS (Internet Information Services), we are making a request for an SSL/TLS certificate that secures numerous domain names (or hostnames) within a single certificate. Multi-domain or UCC (Unified Communications Certificate) certificates are other names for SAN certificates.

This is especially helpful when hosting numerous websites or services on a single server under various domains or subdomains.

Steps to Generate a CSR with SAN in IIS

1. Firstly, open the IIS manager by pressing Windows + R, type inetmgr, and press Enter.

2. In the Connections pane on the left, select the server node.

3. Now, double-click on the “Server Certificates” icon in the main pane to open it.

4. Click “Create Certificate Request…” in the Actions panel on the right of the Server Certificates window.

5. We now have to enter the CSR’s details. The organization’s name (Organization), common name (CN, typically the primary domain name), and location information should be entered as we would for a typical CSR.

6. Click the “Add…” button in the “Subject Alternative Names” section to add new SANs. Additional domains, subdomains, or IP addresses that we want to secure with the same certificate can be listed here. Each entry needs to be on a separate line.

7. For the private key, choose the cryptographic service provider as well as bit length just as we would for a typical CSR.

8. After providing the necessary data and SANs, click “Next,” and then choose a file name and place to save the CSR. Verify the “.csr” extension is present.

9. If everything is okay, go over the data and SANs we’ve provided before clicking “Finish” to create the CSR with SAN.

10. On the server, the private key will be safe. Keep it in a place that only authorized people may access.

11. In order to obtain an SSL/TLS certificate, generate a CSR containing SAN and send it to a reliable Certificate Authority (CA). All of the SANs will have their domain ownership which the CA verifies, and as a result, it issues the certificate.

12. We can install the SAN SSL certificate in IIS using the “Complete Certificate Request…” option in the Server Certificates pane after receiving it from the CA. This also enables SSL/TLS encryption for all of the selected domain names and subdomains and ties the certificate to the private key.

[Need to know more? We’re available 24/7.]

Conclusion

The management of certificates on a server hosting numerous websites or services is made simpler by generating a CSR with SAN in IIS, which enables us to secure multiple domain names with a single SSL/TLS certificate.