The certificate names no host in its subject alternative names.

CERT_NO_SAN · Severity: Warning

• WarningCERT_NO_SAN

  The certificate names no host in its subject alternative names.

  Browsers match a host only against the DNS and IP entries of the subject alternative name extension and ignore the common name (RFC 9525). A server certificate without them matches no host.

  Recommendation: Issue the certificate again with the host names as DNS entries.

Reported by

• PEM certificate decoder

Available through the API

• PEM certificate decoder API

Related findings

• Error CERT_NOT_YET_VALID The pasted certificate is not valid yet.
• Error CERT_EXPIRED The pasted certificate has expired.
• Warning CERT_EXPIRING_SOON The pasted certificate expires within 30 days.
• Info CERT_LONG_VALIDITY The certificate is valid longer than public TLS certificates may be.
• Info CERT_SELF_SIGNED The pasted certificate is self-signed.

All findings