An IT administrator is deploying multiple internal web applications under subdomains of an enterprise domain (such as `hr.corp.example.com` and `finance.corp.example.com`). To simplify administrative overhead and ensure all current and future first-level subdomains are secured under a single TLS certificate issued by the internal Certificate Authority, which of the following certificate features should be specified during the Certificate Signing Request (CSR) process?
- A wildcard domain entry configured within the Subject Alternative Name (SAN) extensionAnswer
- BGenerating the private key on the Certificate Authority server and exporting it inside the CSR payload
- CEmbedding symmetric session encryption keys into the extended key usage field of the request
- DConfiguring the digital signature usage attribute to perform bulk data encryption for connected clients
Answer
A wildcard domain entry configured within the Subject Alternative Name (SAN) extension should be requested during CSR creation.
Specifying a wildcard domain (e.g., `*.corp.example.com`) in the Subject Alternative Name (SAN) extension allows a single certificate to authenticate all first-level subdomains under the specified domain. Modern clients require domain names and wildcard aliases to be declared in the SAN extension to pass validation checks.
Step-by-Step Solution
Key Concept
Public Key Infrastructure - Wildcard Certificates and SAN Extensions
Estimated Time:1m 0s