In our current environment, our app environment is configured with wild card using verisign certs. As Google is planning to mistrusting all certs issued by Symantec and in which verisign falls under its umbrella. We are planning to get away from it.

We are currently looking for an alternative and I didnt find much info on using SAN certs. Does wildcard cert is only cert that we can use for app configuration?

1 Answer 1


The reason why wildcard certs are all but required for the App Domain is that the identifier of the App is generated at installation time of the App. So an App installed on one Site Collection will have a different identifier from an App installed in another Site Collection.

Since you cannot predict the URLs, and you'd have to re-issue a cert each time you deployed an App, a wildcard is a must.

  • 1
    Thank you Trevor, Im big fan of your books. Thanks for taking your time to respond to my question. Mar 26, 2018 at 15:03
  • Thanks! Here's more info by the way - technet.microsoft.com/en-us/library/…
    – user6024
    Mar 26, 2018 at 15:11
  • @user6119395 Please don't forget to mark the answer as accepted in case it helped you! Mar 26, 2018 at 15:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.