Subject Alternative Name missing Error under Browser (SAN Missing)
Error :
Solution:
Please find below the commands that can be used to create the keystore and corresponding CSR request with SAN included:
Keystore creation:
keytool -genkey -alias <your_alias_name> or [Domain Name] -keyalg RSA -keysize 2048 -sigalg SHA256withRSA -keystore sdp.keystore -ext san=dns:<fqdn>
CSR creation:
keytool -certreq -alias <your_alias_name> -sigalg SHA256withRSA -file key.csr -keystore sdp.keystore -ext san=dns:<fqdn>
These commands should create a keystore and corresponding CSR request with the custom SAN provided.
By obtaining a certificate with this CSR and installing the resultant certificates into the keystore, should fix the issue that occur with Chrome browser.
New to ADSelfService Plus?
Related Articles
Common SSL Issues
1. SSLException : PKIX Path Exception Trace : javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification ...Error: No subject alternative names matching ipaddress while syncing AE with SDP-MSP
The issue occurs when specifying IP address or incorrect server name while configuring Central Server Details. In server name field fill the domain name for which the certificate was bought.Step-by-step: SSL Installation
In ServiceDesk Plus, we use a keystore file to store the private key and this keystore file will be used by the web server to secure the connections. Below are the steps that needs to be followed to generate a keystore file and install the ...SSL Installation
Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on ServiceDesk Plus server ?, then click here to find how to export SSL certificate using MMC. Do you already have a .PFX certificate ...How do I install SSL certificate for ServiceDeskPlus-MSP?
Introduction ServiceDesk Plus - MSP can run as a HTTPS service. But it requires a SSL (Secure Socket Layer) Certificate signed by a valid Certificate Authority (CA). By default, on a first-time start-up, it creates a self-signed certificate. This ...