BYOD User with multiple devices

[Catherine Paquet]

If a user onboards 3 BYOD devices on corporate network (iPad, Android phone, laptop), will the MS CA issue separate certs for each device or will it re-new the cert, adding as SAN the additional device's MAC address?  i.e.:  3 certs or 1 cert with 3 SANs?  Thanks.

[aleccham]

This will create 3 different certs. for each device as certs. are configured based on hostname. 

A SAN is used when there could be multiple DNS records. For example, https://example.com is inputted by the user but only https://www.example.com is configured on the MS CA, then an error will present informing the user that the connection is refused.