Can I issue certs from an Enterprise CA for a different domain name?

Brad Swientoniowski 21 Reputation points
2021-04-14T16:15:40.34+00:00

We have an active directory domain named after one of two companies that merged to form our current company. Let's call it oldcompany1.com This is the AD domain we kept post merger.

We did register a public Internet domain with the new company name after the merger. Let's call it MergedCompany.com

We do have "mergedcompany.com" configured as a primary forward lookup zone integrated into AD DNS.

There are only a few internal resources we have static records for in our mergedcompany.com DNS zone.

Would I be able to issue certificates with the subject name or SAN for something like "intranet.mergedcompany.com" from our enterpriseCA.oldcompany1.com? Is it just a matter of putting the other domain in the subject name/SAN field in the certificate request?

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,729 questions
Accepted answer
  1. Vadims Podāns 9,036 Reputation points MVP
    2021-04-15T13:06:20.687+00:00

    Yes, you can do this by using Web Server or derived certificate template. This template by default accepts user-supplied subject, so you can insert whatever name you need in subject alternative name. The process is well described in my blog post: https://www.sysadmins.lv/blog-en/web-server-certificate-enrollment-with-san-extension.aspx

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest