Question
A systems administrator at a web-hosting provider has been tasked with renewing the public certificates of all customer sites. Which of the following would best support multiple domain names while minimizing the amount of certificates needed?
- A. OCSP
- B. CRL
- C. SAN Correct
- D. CA
Explanation
A Subject Alternative Name (SAN) certificate lists several domain names in one certificate, so one renewal can cover many customer sites. OCSP and CRL are ways to check whether a certificate has been revoked and do not cover extra names. A CA issues certificates but is not itself a way to reduce how many certificates are needed.
