Questions tagged [subject-alternative-names]

Filter by
Sorted by
Tagged with
0 votes
0 answers
22 views

Certificate validation issue with subdomains of subdomains [duplicate]

I have a current, production certificate with a wildcard common-name hosted in Amazon Certificate Manager (ACM). I've added a CNAME with a subdomain of a subdomain (like ....) to our Route53 zone that ...
user avatar
0 votes
1 answer
1k views

Why do i get openssl error unknown option for -adext?

I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips openssl req -new \ -...
user avatar
0 votes
1 answer
145 views

Certificate for Gitlab-Server is invalid für Subject Alternative Name

My company has a certificate for https://data.ddl.at, which has, among others, a SAN (Subject Alternative Name) for gitlab.ddl.at. This Gitlab-Server is internal, and the domain name is only resolved ...
user avatar
0 votes
1 answer
170 views

kubernetes apiserver systemd service is not activated

I am seeing below error message when kube-apiserver systemd server is started. cannot validate certificate for 192.168.101.101 because it doesn't contain any IP SANs". Reconnecting... Following are ...
user avatar
2 votes
2 answers
1k views

Why would Chrome ignore the X509v3 Subject Alternative Name in my cert?

I have a cert that include an X509v3 Subject Alternative setting, but Chrome 67.0.3396.99 is saying the Subject Alternative Name is missing even though it looks like it's included in the cert. Here's ...
user avatar
  • 257
3 votes
0 answers
14k views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
user avatar
  • 171
0 votes
2 answers
2k views

Better understanding TLS/SSL Alternative Names?

Can someone explain (to a 5 year old) how Alternative Names are used? And why some domains have SO many? Are all of these domains sharing a certificate? Are there any security risks (MitM attacks?) ...
user avatar
1 vote
1 answer
835 views

Block Subject Alternative Names in ADCS

I am managing a Windows 2008 ADCS CA and have been aware of the security risks in issuing certificates with SANs. So I tested issuing a PKCS10 file with SANs in the request and it issued the ...
user avatar
1 vote
0 answers
679 views

How to provide a subjectAltName when generating a Certificate Request in IIS?

It seems the latest versions of Chrome, Firefox and Vivaldi no longer work with our Domain Certificates generated by Active Directory Certificate Services because they lack a subjectAltName. My ...
user avatar
0 votes
1 answer
3k views

Adding a Subject Alternative Name to an exchange certificate

We're running an Exchange 2010 environment with multiple SMTP domains which we have configured autodiscover for as well. Now we have discovered that some of the autodiscover addresses hass not been ...
user avatar
28 votes
4 answers
30k views

What is the difference between SAN and SNI SSL certificates?

Could someone explain me the difference between these certificates in a simplified way? I read some articles but it sounds like they do the same job, namely encrypting many domains with one ...
user avatar
  • 437
2 votes
4 answers
5k views

Let's Encrypt: use Subject Alternative Name for internal domain

My Synology NAS is capable of running the web interface via HTTPS. By default, you access the NAS via its name (say, mynas) so http(s)://myname:5001 or http(s)://myname.local. It defaults to an SSL ...
user avatar
1 vote
2 answers
206 views

OpenSSL config expansion

I created own Certificate Authority and server (virtualhost) certificate based on this specification: https://jamielinux.com/docs/openssl-certificate-authority/index.html It's successfully created, ...
user avatar
  • 121
1 vote
1 answer
992 views

Certificate SAN support regexp stemming?

Searched on this, but can't find any clear answer - can a certificate SAN contain a name like "citrix*.domain.com", to permit use with citrixdirector.domain.com and citrixprod.domain.com, for example?
user avatar
6 votes
1 answer
31k views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
user avatar
  • 73
0 votes
1 answer
122 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
user avatar
10 votes
3 answers
35k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...
user avatar
  • 2,732