Subject Alternative Name (SAN) Examples and SSL/TLS Certificate Options

Do you manage multiple product lines on separate websites with services hosted on unique subdomains? If so, a SAN SSL certificate is what you need.

A SAN SSL/TLS certificate is a flexible solution for businesses with a global online presence or multiple brands. It’s perfect for organizations looking to secure various domains and subdomains on a single platform. Think about it: with one certificate, you can secure multiple domains, such as www.example.com, mail.example.org, shop.example1.net, and blog.example.co.uk. Isn’t that convenient?

Let’s quickly review what a subject alternative name is before diving into a few subject alternative name examples of SSL/TLS certificates.

What Is a Subject Alternative Name?

The subject alternative name (SAN) is a field that’s included within SSL/TLS certificates. It’s a certificate extension that allows you to specify multiple values you want to secure using the digital certificate. For example:

• Separate fully qualified domain names (FQDNs)
• Hostnames,
• Specified subdomains

A Quick Look at What A SAN Certificate Is

The term SAN also applies to a type of website security certificate as well, which is called a SAN SSL/TLS certificate. This certificate is also commonly known as a Multi-Domain SSL/TLS certificate because it’s a single certificate that can cover multiple unique domains or the same domain name with different top-level domains (TLDs).

Why Use a SAN Certificate?

Including additional values in the SAN field when generating your certificate signing request (CSR) enables you to secure multiple web addresses under a single X.509 digital certificate.

This versatile tool is perfect for larger businesses that handle multiple sites. With a SAN SSL, you streamline administrative tasks and cut costs. So, why juggle multiple certificates when one SAN SSL certificate can virtually do it all? And when you consider that some server environments won’t allow multiple SSL/TLS certificates anyhow, it makes sense to use one certificate when possible.

A Look at Subject Alternative Name Certificates (with Examples)

Let’s explore the two types of SAN SSL/TLS certificates through examples, each suited to meet the different website security needs your organization may have.

1.      SAN Multi-Domain SSL Certificate

A SAN multi-domain SSL certificate allows you to secure multiple domains using a single certificate. This approach helps you simplify certificate management tasks and reduce costs.

Traditional SAN certificates are available with all three validation level options: domain validation (DV), organization validation (OV), and extended validation (EV) options. Depending on the issuing CA, this provides full encryption and site authentication for up to 1,000 SAN-specified domains and subdomains.

Examples of Subject Alternative Name Domains You Can Secure

Here are some examples of values you could add to the SAN field:

Primary domains:

• example1.com
• example2.net
• example3.org
• blog.example1.com
• service.example3.org

You also can use the SAN field to secure specified subdomains that have important business use cases:

• blog.example1.com (company blog)
• shop.example2.net (online store)
• service.example3.org (customer service portal)
• portal.example1.com (client portal)
• api.example3.net (API services)

If your needs extend beyond securing specific subdomains to include virtually all of them, this next type of certificate might be more appropriate.

2. SAN Multi-Domain Wildcard SSL Certificate

A SAN multi-domain wildcard SSL certificate blends the benefits of wildcard and multi-domain certificates. It lets you secure multiple domains and their first and second-level subdomains. Often called “SAN wildcards,” “multi-domain wildcards,” or “UCC wildcards,” these certificates provide strong encryption for a wide range of domains and subdomains under one certificate.

These certificates differ from traditional wildcards, which can only secure the subdomains on a single level for one domain (e.g., *.example.com). However, like those single-domain wildcards, SAN wildcard certificate validation options are restricted to DV and OV. 

A SAN multi-domain wildcard SSL certificate secures up to 1,000 domain names (depending on the brand) and virtually unlimited subdomains for each specified SAN domain.

Here are some subject alternative name example domains you can add to the SAN field for multi-domain wildcard SSL certificates:

Primary domains and wildcards:

• www.example1.com (primary website)
• *.example1.com (all first-level subdomains of example1.com)
• *.example2.net (all first-level subdomains of example2.net)
• example3.org (primary domain)
• *.shop.example3.org (all second-level subdomains of shop.example3.org)

Subdomains and specific business use cases:

• portal.example1.com (client portal)
• login.example2.net (user login page)
• store.example3.org (e-commerce site)
• payments.store.example3.org (payments page for the store)
• chat.support.example5.com (chat support)

2 Examples of SAN SSL/TLS Certificates in the Wild

Here are two real-world examples of SAN and SAN wildcard certificates in use:

Example #1: Wix (SAN Wildcard SSL/TLS Certificate)

This SAN certificate for Wix.com covers multiple domains and subdomains, including *.wix.com, *.editorx.com, *.wixsite.com, and editorx.com. More domains and subdomains are listed under “Field Value” when scrolled down.

Image caption: Wix SAN certificate example

Example #2: Kroger (Traditional SAN SSL/TLS Certificate)

This SAN certificate for Kroger’s grocery store website includes several domains and subdomains, such as www.kroger.com, deliverynow.citymarket.com, deliverynow.dillons.com, and deliverynow.food4less.com. Additional domains and subdomain values are listed under “Field Value” as certificate subject alternative name examples when you scroll down.

Image caption: Kroger SAN certificate example

How Can SAN SSL Certificates Improve Your Domain Management and Security?

Imagine reducing the time and hassle you spend managing multiple certificates. That’s what a SAN SSL certificate can do for you. It’s not just about security; it’s also about streamlining your operations and saving costs. Here’s how implementing SAN SSL certificates can really make a difference.

• Streamlining management for multiple domains: With a single SAN SSL certificate, you can lock down multiple domains under one certificate. This makes the renewal process a breeze and helps you avoid unexpected expirations.
• Widening coverage with comprehensive protection: Want to cover multiple domains and subdomains, even across different top-level domains (TLDs)? A SAN SSL certificate has got you covered.
• Increasing adaptability for business growth: Need to add or remove domains as your business grows? A SAN SSL certificate makes it easy to adjust during the certificate’s lifecycle.
• Improving cost-efficiency by reducing certificate purchases: Why spend more? Save money by using one SAN certificate instead of buying separate ones for each domain.
• Enabling robust security with high-level encryption: Looking for top-notch security? Get 256-bit encryption and choose from DV, OV, or EV. (Remember: Extended validation isn’t supported for any wildcards, including SAN wildcard certificates.)

Read our detailed article on SAN certificates to learn more about choosing the right SSL for your organization and its benefits.

Why Choose Comodo for Your SAN SSL Certificates

Do you need to secure multiple domains or specific subdomains without breaking the bank? Comodo’s SAN SSL certificates are cost-effective, reliable, and come with great around-the-clock support. They’re perfect for businesses with extensive online reach or multiple brand portfolios.

• Affordable prices for your budget: ComodoSSLstore.com offers SAN SSL/TLS certificates at competitive prices, helping you save compared to buying individual certificates. Why pay more?
• Price match promise for best deals: ComodoSSLstore.com matches competitors’ prices, so you always get the best deal. Isn’t that great?
• Money-back assurance for peace of mind: Enjoy peace of mind with ComodoSSLstore.com’s 30-day money-back guarantee. If you’re not satisfied, you get your money back.
• Top-notch support around the clock: Need help? ComodoSSLstore.com’s Support team is available 24/7/365 via email, live chat, and phone to assist with any questions or issues. Anytime you need us, we’re here.