An IT administrator is deploying multiple internal web applications under subdomains of an enterprise domain (such as `hr.corp.example.com` and `finance.corp.example.com`). To simplify administrative overhead and ensure all current and future first-level subdomains are secured under a single TLS certificate issued by the internal Certificate Authority, which of the following certificate features should be specified during the Certificate Signing Request (CSR) process?
- A wildcard domain entry configured within the Subject Alternative Name (SAN) extensionCevap
- BGenerating the private key on the Certificate Authority server and exporting it inside the CSR payload
- CEmbedding symmetric session encryption keys into the extended key usage field of the request
- DConfiguring the digital signature usage attribute to perform bulk data encryption for connected clients
Cevap
A wildcard domain entry configured within the Subject Alternative Name (SAN) extension should be requested during CSR creation.
Specifying a wildcard domain (e.g., `*.corp.example.com`) in the Subject Alternative Name (SAN) extension allows a single certificate to authenticate all first-level subdomains under the specified domain. Modern clients require domain names and wildcard aliases to be declared in the SAN extension to pass validation checks.
Adım Adım Çözüm
Anahtar Kavram
Public Key Infrastructure - Wildcard Certificates and SAN Extensions
Tahmini Süre:1m 0s