The shop site has to open at www.shop.lab.test too. Issue it a new certificate yourself: the key stays the same, and the SAN gets two names.
Issue a certificate for two names
In ~/tls-lab, issue the certificate shop-new.crt for the shop site: the names shop.lab.test and www.shop.lab.test, the existing key /etc/nginx/tls/shop.key, signed by the training CA (ca.crt and ca.key in ~/tls-lab), valid for 90 days.
Goals · 0 of 3
- Issue shop-new.crt with the site's existing key not done yet
- Have the training CA sign it for 90 days not done yet
- Put both site names into the certificate not done yet