How to Get a DigiCert Certificate with Email Address in the Subject?

October 31, 2025 3 answers
Asked by TechWhiz42
Hey everyone! So, the digital certificate we use for client authentication on a SOAP endpoint is about to expire, and we can't seem to get a proper replacement. The endpoint provider requires the emailAddress field to be included in the subject of the certificate, which has been part of our current certificate and CSR. However, all the new certificates we've received so far are missing this field. The ordering team can't find an option to include it, and even the DigiCert account manager mentioned that this field isn't used anymore in their newer products. They keep selecting S/MIME certificate types, but I'm not really sure why. Since I'm not involved in the ordering process, I'm hoping someone here can clarify what's going on and suggest a specific product we need to order to ensure that the emailAddress field is included. Thanks in advance!

Answers

QuerySolver88
Yeah, I think the issue is mainly with the email field missing in the new certificates. DigiCert and the endpoint provider seem to have different views, which is super confusing. I'd check if your team tried the S/MIME product and ensured that the common name (CN) was set to the email address. While the mailAddress isn't specifically required, you'd think DigiCert would include it. If you're considering other certificate authorities, let me know!
Reply to this answer
EmailCertExpert
If you really want the email address included in the CN of the subject line, just order a Class 1 certificate or a Secure Email for Department certificate. They both work for including that info without hassle.
Reply to this answer
CertGuru99
It sounds like you definitely need an S/MIME certificate if you want to include the emailAddress field. Despite some recent changes in the validation of these certs, S/MIME should still meet the requirements for including that field. The previous product you had might have been outdated, but DigiCert's S/MIME certificates should still incorporate the emailAddress you need.
Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions