For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dayesh_263997's avatar
Dayesh_263997
Icon for Nimbostratus rankNimbostratus
Dec 11, 2018

SAN (Subject Alternative Name) query - is it mandatory ?

Hello Team,

 

What is Subject alternative name in the certificate? Is it mandatory to fill the SAN details?

 

Regards,

 

Dayesh

 

application delivery
LTM

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Dec 12, 2018

    RFC describe following behavior :

     

    • if both SAN and subject are defined, the only value that is checked to match server name matches is SAN
    • if only subject is defined, the server name must match subject.

    So SAN is not mandatory, ...

     

    But Google Chrome decided to change rules since 2017... google chrome obsoletes subject validation and requires SAN as the only valid server name field.