X.509 Certificate Common Name Updates after Okta Subdomain Changes
Aug 21, 2025
Okta Classic Engine
Okta Identity Engine
Administration
Overview
This article discusses whether Okta updates the Common Name in the X.509 certificate after an Okta subdomain change.
Applies To
- Okta Subdomain
- Administration
Solution
Okta will not change the CN in the certificate as this value is not taken into consideration by the Service Provider and the existing one will continue to work. This applies to certificates generated for existing application instances and newly created apps.
If the new domain must be presented in the certificate, this can be accomplished per app through the steps mentioned in the references below.
