I created a certificate authority on my MacBook, and I'm using it to create a wildcard certificate. I have the root CA added as trusted into my system keychain. On Safari, it complains that the certificate is not standards compliance, and I'm not sure what piece I am missing. I'm not sure if I scrubbed all sensitive information from this or not, but it's my internal lab and not accessible from the internet.
I have my wildcard name in the Subject Alternative Name section. I used sha256 for the signature algorithm. The public key is 4096 bit. The duration of the certificate is 825 days.
Any idea what I am missing still?
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:48:98:c3:05:9d:64:a1:ad:ad:db:0d:93:b9:8a:65:37:c7:d8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Macbook Root Certificate Authority
Validity
Not Before: Jun 12 21:26:06 2022 GMT
Not After : Sep 14 21:26:06 2024 GMT
Subject:
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
<snipped>
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Alternative Name:
DNS:*.apps.ocp4.example.com
X509v3 Key Usage:
Digital Signature, Key Agreement
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Subject Key Identifier:
32:EC:2D:C5:2F:B1:BA:5A:53:A2:F5:E5:B1:A3:92:C8:B2:E1:D0:36
X509v3 Authority Key Identifier:
keyid:FF:47:90:DB:B4:1A:BD:B5:55:BD:03:45:B0:DC:CA:20:1D:A2:A7:64
Signature Algorithm: sha256WithRSAEncryption
<snipped>
Edit: added CA certificate for reference
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c2:88:e5:e2:2a:cb:5e:1b:4b:00:48:82:9e:8e:a2:99:c7:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=Macbook Root Certificate Authority
Validity
Not Before: Jun 12 20:20:40 2022 GMT
Not After : Jun 9 20:20:40 2032 GMT
Subject: CN=Macbook Root Certificate Authority
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (4096 bit)
Modulus:
<snipped>
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Certificate Sign
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
FF:47:90:DB:B4:1A:BD:B5:55:BD:03:45:B0:DC:CA:20:1D:A2:A7:64
Signature Algorithm: sha256WithRSAEncryption
<snipped>