Re: Isn’t the responsibility of a certificate authority?

[gordonf]

It’s up to the CA to add Subject Alternative Name objects to a cert. So as long as it’s possible for Zeroshell to create CSRs as opposed to self-signed certs, a CA can add additional DNS names and IP addresses to the cert.