Patent ID: 8364954

Claim:
A computer-implemented method of provisioning a first digital certificate and a second digital certificate based on an existing digital certificate, the method comprising: receiving, at a data processor, information related to the existing digital certificate, wherein the existing digital certificate includes a public key, a first name listed in a Subject field, and a second name listed in a SubjectAltName extension; receiving, at the data processor, an indication from a user to split the existing digital certificate; extracting, at the data processor, the first name from the Subject field of the existing digital certificate; extracting, at the data processor, the second name from the SubjectAltName extension of the existing digital certificate; extracting, at the data processor, the public key from the existing digital certificate; provisioning, at the data processor, the first digital certificate with the first name, listed in a Subject field of the first digital certificate, and the public key; and provisioning, at the data processor, the second digital certificate with the second name, listed in a Subject field of the second digital certificate, and the public key.