Allow CNAME to be used for the WSUS SSL certificate
Switching WSUS to run on SSL is easy, but you can only configure it to use a certificate that matches the hostname.
We're in the age where servers are in the cloud and can be regularly rebuilt using automation, where the default hostname will change with each rebuild.
This means that, if you're using a DNS CNAME to point clients to your WSUS server, you can't run WSUS on SSL.
If we could configure WSUS to use a certificate that is issued using a CNAME, we can point the CNAME to the new server, and everything works. No need to change group policy to issue a new certificate to all clients whenever you rebuild WSUS. No waiting time for hours where clients can't connect to the new WSUS server until GPO refreshes. it would let us get the best out of security whilst minimising downtime.