Questions tagged [san]

SubjectAltName is an extension field in an X.509 certificate that allows the inclusion of alternate names for the certificate holder, such as domain names, email addresses, etc.

Filter by
Sorted by
Tagged with
0
votes
0answers
24 views

CA issued certificates maps to the wrong user in AD

I'm doing certificate-based authentication using windows server 2012. I've set up the CA, NDES and now, when I request a certificate using the SCEP Challenge password, I'm able to receive the ...
1
vote
2answers
128 views

Are SAN IP addresses / DNS names useless in self signed certificates by untrusted CAs?

I want to generate a self signed certificate for temporary local testing of a web service via HTTPS. I don't want to install the CA though, because the self signed certificate is generated on the fly ...
-1
votes
1answer
122 views

SSL Certificate Subject Alternative Name Information Disclosure

I'd appreciate if someone could shed some lights on the subject findings. Is this a security problem having bank.com appearing on the SAN? Hostname was discovered in the Subject Alternative Name (...
4
votes
2answers
3k views

Add a San(Subject Alternative Name) to already existing cert?

So we have a system that generates a key for every server signed by the company CA. I need to add a SAN to it but don't really have access to the CSR. Is there anyway to add a SAN? Maybe generate ...
0
votes
2answers
86 views

How do cert authorities set and determine subjectAltNames if not provided by end user?

Let's say as an end user I generate a CSR (for a server cert) to send over to a CA and I don't include a subject alternative name. How or what would they do in order to include that information on the ...
0
votes
1answer
94 views

Certificate SAN Disclosure. How harmful can it be?

My daily job duties brought me (by mistake) to the following IP: 52.63.96.32 It appears the registrar has signed with a single certificate a "lot" of domain. https://www.shodan.io/host/52.63.96.32 ...
4
votes
1answer
3k views

Chrome requires SAN names in Certificate. When will other browsers (IE) follow? [closed]

Chrome requires SSL Certificates to list the site name(s) in the subject alternative name (SAN) to be trusted. Usage of common name only is not seen as secure enough, and will result in a certificate ...
0
votes
1answer
385 views

DNS hijacking and Subject Alternative Names

My website is published on Google's Firebase Hosting. I own the domain. Google provision an SSL certificate (lately from Lets Encrypt, it used to be someone else). The certificate is shared between ...
6
votes
1answer
7k views

Are certificate sans case sensitive

Creating a certificate request for my exchange server I am wondering if sans and CNs are case sensitive?
2
votes
1answer
1k views

Same SAN listed in different certificates, both valid at the same time? [duplicate]

I am implementing a multi-master highly available service, which is deployed on two different machines. There is also third machine. It doesn't do anything other than cross-monitoring the cluster and ...
2
votes
1answer
2k views

What are OIDs in the context of this keytool command?

I'm in the process of setting up a 3rd party plugin to Elasticsearch called Search Guard which requires also Search Guard SSL. While setting up Search Guard SSL, you're required to set up several ...
1
vote
1answer
207 views

Subject Alt Name certs

Is it ok to specify subdomains in certificates that support SAN. For example base domain is example.com and I want a.example.com, b.example.com, and c.example.com to be included? What is the primary ...
4
votes
2answers
766 views

Multiple, different sites on same server. Individual SSL certificates for each or SAN certificate?

On a server containing multiple unrelated sites what is the best solution, in general, for applying SSL security to each site? Individual certificates for each site or a SAN certificate?
2
votes
1answer
100 views

What is the risk of data being recovered from SAN storage after logical deletion?

The specific scenario involves Linux servers on VMware hosts with SAN storage. If files containing sensitive data are deleted by Linux, can they be recovered by a low level tool similar to what might ...