PKI certificate

[Piotr Nawrocki]

Hello, I have enterprise CA in place and I would like to use enterprise signed certificate. The problem is that in every browser except Chrome everything is working fine, in Chrome I get an error NET::ERR_CERT_COMMON_NAME_INVALID. I know this problem is related to the Chrome which requires SAN to be specified along with the CN in the certificate. However I have put both values in Portecle during certificate generation. Is there any possible way to get it working?

Regards

Piotr

[Andy Heinzer]

I'm not certain of exactly how to do this in the portecle app.  However I did find other users that have gotten past this problem using the keytool utility included in the Oracle Java JDK.

Examples:

• https://community.atlassian.com/t5/Jira-questions/JIRA-Chrome-58-SSL-Security-missing-subjectAltName/qaq-p/581668
• https://stackoverflow.com/questions/8744607/how-to-add-subject-alernative-name-to-ssl-certs
• https://stackoverflow.com/questions/30755220/how-to-create-csr-with-sans-using-keytool/43637750#43637750

These all indicate that you can use the -ext attribute when generating the CSR and specify your dns alternative name, such as:

keytool -certreq -file test.csr -keystore test.jks -alias testAlias -ext SAN=dns:test.example.com