I'm trying to issue a certificate which was generated by openssl.
$ openssl req -out vpn_certrequest.csr -key vpn_key.key -new -sha256
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:BE
State or Province Name (full name) [Some-State]:A
Locality Name (eg, city) []:MyCity
Organization Name (eg, company) [Internet Widgits Pty Ltd]:MyOrg
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:My Name
Email Address []:[email protected]
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
After going to my CA (Windows Server 2008 based, using http://localhost/certsrv/), I pick "Request a certificate", "submit an advanced certificate request" and then paste the output of cat vpn_certrequest.csr
.
As "Certificate Template" I pick "User" and then hit submit.
However, when I download the signed certificate, I cannot find any information back that I originally entered (such as MyCity/MyOrg/My Name). The CN ("Isseued To") is set to "Administrator".
Any idea what I'm doing wrong?
Certificate Template
, then it is respected. But with Web Server, the intended purpose is wrong. When I use Authenticated Session, the same occurs. Should I make changes to my Windows Server CA, then?