Share via

Can I issue certs from an Enterprise CA for a different domain name?

Brad Swientoniowski 21 Reputation points
2021-04-14T16:15:40.34+00:00

We have an active directory domain named after one of two companies that merged to form our current company. Let's call it oldcompany1.com This is the AD domain we kept post merger.

We did register a public Internet domain with the new company name after the merger. Let's call it MergedCompany.com

We do have "mergedcompany.com" configured as a primary forward lookup zone integrated into AD DNS.

There are only a few internal resources we have static records for in our mergedcompany.com DNS zone.

Would I be able to issue certificates with the subject name or SAN for something like "intranet.mergedcompany.com" from our enterpriseCA.oldcompany1.com? Is it just a matter of putting the other domain in the subject name/SAN field in the certificate request?

Windows for business | Windows Server | Devices and deployment | Configure application groups
Accepted answer
  1. Vadims Podāns 9,186 Reputation points MVP
    2021-04-15T13:06:20.687+00:00

    Yes, you can do this by using Web Server or derived certificate template. This template by default accepts user-supplied subject, so you can insert whatever name you need in subject alternative name. The process is well described in my blog post: https://www.sysadmins.lv/blog-en/web-server-certificate-enrollment-with-san-extension.aspx

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.