...
When a TCS member orders a GÉANT OV SSL certificate in Cert Manager for a name, such as mail.sample.example.org, in the Subject Alternative Names, they get a correct entry for DNS:mail.sample.example.org but they also get DNS:www.mail.sample.example.org. I have confirmed this by looking at issued certificates in our SCM instance. We recommend ordering GÉANT OV Multi-Domain for the time being instead of GÉANT OV SSL. This issue has been raised with the supplier.
Q: Are Document Signing Certificates available via Sectigo?
It is currently possible to order Document Signing Certificates on a preconfigured USB token from Sectigo. The token needs to be purchased from Sectigo directly through their retail site (not SCM): https://store.sectigo.com/cart.php?a=confproduct&i=1 Only NREN MRAOs can create accounts on this site and order document signing certificates for their members. Sectigo does not have a list of your member organisations and therefore they do not know who is eligible for the TCS service. The token costs 120 USD (discounted price for TCS members only). More information on this process in this GUIDE.