The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
41 views

Is a Multiple Domain SSL Cert necessary for Exchange?

We have a client with an external domain of abc.com and an internal domain of xyz.local. I see a lot of articles stating that for Exchange you should have a multi-domain cert that has Subject ...
3
votes
1answer
58 views

Unable to generate certificate with Subject Alternate Name using Java 1.7 keytool utility

I'm having an issue generating a keypair with subject alternate name using the Java keytool utility from Java 1.7. I'm attempting to follow the instructions found here An example of the command I'm ...
0
votes
1answer
37 views

Limit on X509v3 Subject Alternative Name DNSname length

I have been searching through RFC 5280, 1034, and 1123 trying to figure out what a max string length is, but I can't find it. I'm wondering if any of you happen to know. For those of you who know ...
0
votes
2answers
45 views

Subject Alternative Name when internal and external hostnames differ

I have two servers in an Active Directory domain. Both servers have apps that run in Tomcat. I'm ordering PKI certificates for these two servers. The servers are members of the AD domain ...
1
vote
0answers
62 views

OpenSSL always shows “unsupported” for all subjectAltName “otherName” UTF8 values

It seems like OpenSSL is broken when trying to read back subjectAltName/otherName/UTF8 values that were written by itself: The relevant openssl.cnf configuration (using an official but random OID): ...
1
vote
1answer
462 views

Wildcard on Subject Alternative Name

I have certificate issued to *.iphone.apple.com. It has *.ipod.apple.com as a SAN. Can this be used for gen5.touch.ipod.apple.com or should *.touch.ipod.apple.com be added to *.iphone.apple.com as a ...
1
vote
1answer
2k views

Unable to submit certificate request to 2k8R2 CA

I have created a two-tier CA using Windows Server 2008 R2. The .inf files used to create this standalone root and an enterprise subCA are at the end of this post. The root is installed OK and issued ...
2
votes
2answers
2k views

How do I use a Multi-SAN certificate on both Lync and Exchange servers?

I have a Multi-SAN certificate issued by Godaddy which has four subject alternate names. to use this in an Exchange environment, I have added the external hostname and internal hostnames of my ...
4
votes
2answers
6k views

How to create a self-signed SSL certificate with subject alternate names (SAN) for IIS websites

Does anyone know how to create a self-signed SSL certificate for use with IIS (7) that has subject alternative names (SAN)s? I need the certificate to be able to validate the hostname AND the IP ...
2
votes
3answers
3k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...