For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mkeenan_289714's avatar
mkeenan_289714
Icon for Nimbostratus rankNimbostratus
Nov 08, 2016

SSL Certificate CSR Subject Alternative Names "DNS="

Hello, I have seen some certificates with something equivalent to "DNS=website.com" in the subject alternative name with the common name value being "website.com" and some certificates with nothing i...
application delivery
BIG-IP
devops
LTM
David__Pasch's avatar
David__Pasch
Icon for Altostratus rankAltostratus
Nov 09, 2016

Are the certs being issued from different CAs?

 

I think most big public CA SSL certs will have the FQDN(one or all) listed completely in the SAN section. The ones I work with do. If the SAN section exists, the clients should be ignoring the CN field. Additionally, the CN field is deprecated, despite current usage, and many apps/browsers are moving to only look at the SAN field.

 

Good Luck!