Reorder SAN for firefox trust (#42)

* Reorder SAN for firefox trust * Reorder SAN for firefox trust
davewasmer · Nov 22, 2019 · b3cd0b7 · b3cd0b7
1 parent 0d3ce16
commit b3cd0b7
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/openssl-configurations/domain-certificate-signing-requests.conf b/openssl-configurations/domain-certificate-signing-requests.conf
@@ -21,5 +21,5 @@ subjectAltName = @subject_alt_names
 subjectKeyIdentifier = hash
 
 [ subject_alt_names ]
-DNS.1 = *.<%= domain %>
-DNS.2 = <%= domain %>
+DNS.1 = <%= domain %>
+DNS.2 = *.<%= domain %>
diff --git a/openssl-configurations/domain-certificates.conf b/openssl-configurations/domain-certificates.conf
@@ -35,5 +35,5 @@ extendedKeyUsage = serverAuth
 subjectAltName = @subject_alt_names
 
 [ subject_alt_names ]
-DNS.1 = *.<%= domain %>
-DNS.2 = <%= domain %>
+DNS.1 = <%= domain %>
+DNS.2 = *.<%= domain %>