The request asks for no host in subject alternative names.

CSR_NO_SAN · Severity: Warning

• WarningCSR_NO_SAN

  The request asks for no host in subject alternative names.

  Public certificate authorities put the host names in the subject alternative name extension, and clients ignore the common name. A request without DNS or IP entries relies on the CA to copy the common name, which not all do.

  Recommendation: Add the host names as DNS entries when creating the request.

Reported by

• CSR decoder

Available through the API

• CSR decoder API

Related findings

• Error CSR_SIGNATURE_INVALID The request's signature does not match its public key.

All findings