# Is there a way to add a subject alternate name when setting the acme\_domain field?

**URL:** <https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982>\
**Category:** Pritunl\
**Tags:** pritunl\
**Created:** [April 10, 2024, 4:20pm UTC](https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982 "2024-04-10T16:20:04Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![bradlylong1](https://forum.pritunl.com/user_avatar/forum.pritunl.com/bradlylong1/32/271_2.png) [@bradlylong1](https://forum.pritunl.com/u/bradlylong1)\
**Post date:** [April 10, 2024, 4:20pm UTC](https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982/1 "2024-04-10T16:20:04Z")

</div>

I use a cname to point to the acme\_domain that is used to deploy Pritunl and would like to included that when Lets Encrypt makes the cert request.

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [April 11, 2024, 2:48am UTC](https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982/2 "2024-04-11T02:48:37Z")

</div>

The Lets Encrypt domain option can include a list of comma separated domain names.

---

<div class="post-metadata">

**Author:** ![bradlylong1](https://forum.pritunl.com/user_avatar/forum.pritunl.com/bradlylong1/32/271_2.png) [@bradlylong1](https://forum.pritunl.com/u/bradlylong1)\
**Post date:** [April 11, 2024, 10:17am UTC](https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982/3 "2024-04-11T10:17:15Z")

</div>

Do you have an example? Every time I try that it always concatenates them into a single string and validation fails.

Just for reference vpn.stud in this case would be a dynamic url that gets generated and vpn.stage would be the cname. No matter how I enter them in the Domain field they always get joined together. Pretty sure the CLI command does the same thing.

[ancient-thunder-9461][2024-04-11 10:04:52,082][ERROR] Failed to get LetsEncrypt cert  
Traceback (most recent call last):  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/handlers/settings.py”, line 1112, in settings\_put  
acme.update\_acme\_cert()  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/acme.py”, line 73, in update\_acme\_cert  
cert = get\_acme\_cert(settings.app.acme\_key, csr, cmdline)  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/acme.py”, line 45, in get\_acme\_cert  
certificate = acmetiny.get\_crt(  
File “/usr/lib/pritunl/usr/lib/python3.9/site-packages/pritunl/acmetiny.py”, line 138, in get\_crt  
raise ValueError(“Challenge did not pass for {0}: {1}”.format(domain, authorization))  
ValueError: Challenge did not pass for [vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io](http://vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io): {‘identifier’: {‘type’: ‘dns’, ‘value’: ‘[vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io](http://vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io)’}, ‘status’: ‘invalid’, ‘expires’: ‘2024-04-18T10:04:49Z’, ‘challenges’: [{‘type’: ‘http-01’, ‘status’: ‘invalid’, ‘error’: {‘type’: ‘urn:ietf:params:acme:error:dns’, ‘detail’: ‘DNS problem: NXDOMAIN looking up A for [vpn.stud.mgmt.XXXXXiovpn.stage.mgmt.XXXXX.io](http://vpn.stud.mgmt.XXXXXiovpn.stage.mgmt.XXXXX.io) - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for [vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io](http://vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io) - check that a DNS record exists for this domain’, ‘status’: 400}, ‘url’: ‘[https://acme-v02.api.letsencrypt.org/acme/chall-v3/337165754037/iGq5UA](https://acme-v02.api.letsencrypt.org/acme/chall-v3/337165754037/iGq5UA)’, ‘token’: ‘Z8vbt84uFGkr8huoVMikxHsAn15xntiODgXSmqIv7so’, ‘validated’: ‘2024-04-11T10:04:50Z’}]}  
acme\_domain = “[vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io](http://vpn.stud.mgmt.XXXXX.iovpn.stage.mgmt.XXXXX.io)”

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [April 18, 2024, 2:15am UTC](https://forum.pritunl.com/t/is-there-a-way-to-add-a-subject-alternate-name-when-setting-the-acme-domain-field/1982/4 "2024-04-18T02:15:18Z")

</div>

Actually for Pritunl it is only one domain. Pritunl Zero and Pritunl Cloud have support for multiple domains but not the VPN server.
