Follow the steps below to add a list of allowed Subject Alternative Names (SANs).

To create an allowed SANs list

1. Open the following URL in a Web browser. 

   https://<hostname>/v2/

   Where <hostname> is the IP address or domain name selected in General.

2. Log in to the Certificate Authority user interface as a user with the Owners or CA Administrators roles on a partition.
3. Select the partition on which to manage certificate authorities and certificates. 
   

4. Click Certificate Authorities in the sidebar and select the Allowed SANs tab.

   

5. Select Add > Allowed SANs list.
6. Configure the following list settings. 
   • Allowed SANs List
   • Hostnames
   • Networks
7. Click Add.
8. When Creating an issuing subordinate authority, select the new SAN list.

Allowed SANs List

The unique identifier of the new list.

Hostnames

The list of allowed DNS hostnames. For each hostname, select the corresponding scope.

• See below for an example of Domains or subdomains scope. 
  DNS name

  example.com, *.example.com
  Matched domains

  example.com

  www.example.com

  api.example.com

  sub.api.example.com
• See below for an example of a Subdomains only scope.
  DNS name

  *.example.com
  Matched domains

  www.example.com

  api.example.com

  sub.api.example.com
• See below for an example of Exact match scope.
  DNS name

  example.com
  Matched domain

  example.com

Networks

The allowed IPv4 and IPv6 network ranges, in CIDR (Classless Inter-Domain Routing) notation.

See below for sample values.