Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [subject-alternative-names]

1
vote
2answers
75 views

Why would Chrome ignore the X509v3 Subject Alternative Name in my cert?

I have a cert that include an X509v3 Subject Alternative setting, but Chrome 67.0.3396.99 is saying the Subject Alternative Name is missing even though it looks like it's included in the cert. Here's ...
0
votes
0answers
508 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
0
votes
2answers
628 views

Better understanding TLS/SSL Alternative Names?

Can someone explain (to a 5 year old) how Alternative Names are used? And why some domains have SO many? Are all of these domains sharing a certificate? Are there any security risks (MitM attacks?) ...
1
vote
1answer
169 views

Block Subject Alternative Names in ADCS

I am managing a Windows 2008 ADCS CA and have been aware of the security risks in issuing certificates with SANs. So I tested issuing a PKCS10 file with SANs in the request and it issued the ...
1
vote
0answers
506 views

How to provide a subjectAltName when generating a Certificate Request in IIS?

It seems the latest versions of Chrome, Firefox and Vivaldi no longer work with our Domain Certificates generated by Active Directory Certificate Services because they lack a subjectAltName. My ...
0
votes
1answer
1k views

Adding a Subject Alternative Name to an exchange certificate

We're running an Exchange 2010 environment with multiple SMTP domains which we have configured autodiscover for as well. Now we have discovered that some of the autodiscover addresses hass not been ...
21
votes
4answers
16k views

What is the difference between SAN and SNI SSL certificates?

Could someone explain me the difference between these certificates in a simplified way? I read some articles but it sounds like they do the same job, namely encrypting many domains with one ...
1
vote
2answers
2k views

Let's Encrypt: use Subject Alternative Name for internal domain

My Synology NAS is capable of running the web interface via HTTPS. By default, you access the NAS via its name (say, mynas) so http(s)://myname:5001 or http(s)://myname.local. It defaults to an SSL ...
1
vote
2answers
112 views

OpenSSL config expansion

I created own Certificate Authority and server (virtualhost) certificate based on this specification: https://jamielinux.com/docs/openssl-certificate-authority/index.html It's successfully created, ...
0
votes
1answer
437 views

Certificate SAN support regexp stemming?

Searched on this, but can't find any clear answer - can a certificate SAN contain a name like "citrix*.domain.com", to permit use with citrixdirector.domain.com and citrixprod.domain.com, for example?
5
votes
1answer
21k views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
0
votes
1answer
82 views

Subject not considered in a certificate with SAN

I have here a certificate with the subject "server01.department.company.com" and two subject alternative names "app1" and "app2". When I connect with app1 or app2 to the server all is fine. But when I ...
9
votes
3answers
20k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...