For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dayesh_263997's avatar
Dayesh_263997
Icon for Nimbostratus rankNimbostratus
Dec 11, 2018

SAN (Subject Alternative Name) query - is it mandatory ?

Hello Team,   What is Subject alternative name in the certificate? Is it mandatory to fill the SAN details?   Regards,   Dayesh  
application delivery
LTM
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Dec 12, 2018

RFC describe following behavior :

 

  • if both SAN and subject are defined, the only value that is checked to match server name matches is SAN
  • if only subject is defined, the server name must match subject.

So SAN is not mandatory, ...

 

But Google Chrome decided to change rules since 2017... google chrome obsoletes subject validation and requires SAN as the only valid server name field.