In article CABr8-B63cE0OEfmYV4otS8jrEp3f0p2PDB2+SX=hEats_HC4xw@mail.gmail.com, Jerry Geis jerry.geis@gmail.com wrote:

I am using the getssl script to add a certificate to my server. The script is automatically adding a SANS www.myserver.com when I do not have a www.myserver.com - just simply the myserver.com

How can I tell getssl to "not add that SANS" entry ?

getssl creates a default getssl.cfg for the domain the first time you run it for that domain. But on subsequent runs, it just uses what is in that file.

So look in the file .getssl/myserver.com/getssl.cfg at the line SANS=

You can remove the unwanted entries from there, or comment out the line if you don't want any additional domains at all in the certificate.

Cheers Tony