Digital Certificate SubjectAltName Extension Merging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing digital certificate management systems require multiple certificates for each server name, leading to administrative burdens and inflexibility, as they cannot efficiently combine multiple identities into a single certificate with a single public key.
Innovation Solution
The method and system combine multiple digital certificates using the SubjectAltName extension, allowing a single certificate to store multiple names, with one name in the Subject field and additional names in the SubjectAltName extension, sharing a single public key, thereby simplifying certificate management and configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple separate digital certificates are used for each server name, then each certificate can be individually managed and verified, but the administrative complexity and number of certificates to manage increases
Solution Approach 1:
The patent combines multiple digital certificates into a single certificate by merging multiple subject names (stored in Subject and SubjectAltName fields) with a single public key. This allows multiple server names to be associated with one certificate, reducing the total number of certificates needed while maintaining the ability to verify each name's identity.
Solution Approach 2:
The patent makes a single digital certificate serve multiple functions by enabling it to authenticate multiple server names simultaneously. The certificate structure is extended to include both Subject and SubjectAlt_name fields, allowing one certificate to function as multiple individual certificates would traditionally require.
2Ease of operation
If a single digital certificate is used for multiple server names, then certificate management is simplified, but the ability to distinguish and verify individual names may be compromised
Solution Approach 1:
The patent adds an additional dimension to certificate name storage by introducing the SubjectAltName extension field. This allows the certificate to store multiple names in structured fields (Subject for primary name, SubjectAlt_name for additional names), enabling both simplified management and precise verification of individual names through their distinct field locations.
3Reliability
If multiple certificates are provisioned for each domain name, then each name has its own dedicated security credentials, but the provisioning process becomes more complex and time-consuming
Solution Approach 1:
The patent merges the provisioning process for multiple certificates into a single certificate issuance operation. By allowing multiple domain names to be specified during a single certificate request and combining them into one certificate with a single public key, the provisioning time is significantly reduced while maintaining dedicated security credentials for each name.
Data Source
AI summary
A method for forming a digital certificate includes receiving contact information associated with the digital certificate. The contact information includes at least a name, a mailing address, and an email address. The method also includes receiving billing information associated with the digital certificate and receiving a Certificate Signing Request (CSR) for the digital certificate. The method further includes receiving a first name for use in forming the digital certificate and receiving a second name for use in forming the digital certificate. Moreover, the method includes receiving an indication of a vendor of web server software, receiving an indication of a service period for the digital certificate, and forming the digital certificate. The first name is stored in a Subject field of the digital certificate and the second name is stored in the SubjectAltName extension of the digital certificate.