Subject Alternative Name missing Error under Browser (SAN Missing)

Subject Alternative Name missing Error under Browser (SAN Missing)


Error :



Solution:

Please find below the commands that can be used to create the keystore and corresponding CSR request with SAN included:

Keystore creation

keytool -genkey -alias <your_alias_name> or [Domain Name] -keyalg RSA -keysize 2048 -sigalg SHA256withRSA -keystore sdp.keystore -ext san=dns:<fqdn>

CSR creation

keytool -certreq -alias <your_alias_name> -sigalg SHA256withRSA -file key.csr -keystore sdp.keystore  -ext san=dns:<fqdn>

These commands should create a keystore and corresponding CSR request with the custom SAN provided.
By obtaining a certificate with this CSR and installing the resultant certificates into the keystore, should fix the issue that occur with Chrome browser.

                  New to ADSelfService Plus?

                    • Related Articles

                    • Step-by-step: SSL Installation

                      In ServiceDesk Plus, we use a keystore file to store the private key and this keystore file will be used by the web server to secure the connections. Below are the steps that needs to be followed to generate a keystore file and install the ...
                    • Error: No subject alternative names matching ipaddress while syncing AE with SDP-MSP

                      The issue occurs when specifying IP address or incorrect server name while configuring Central Server Details. In server name field fill the domain name for which the certificate was bought.
                    • SSL Installation

                      Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on ServiceDesk Plus server ?, then click here to find how to export SSL certificate using MMC.  Do you already have a .PFX certificate ...
                    • How do I install SSL certificate for ServiceDeskPlus-MSP?

                      Introduction ServiceDesk Plus - MSP can run as a HTTPS service. But it requires a SSL (Secure Socket Layer) Certificate signed by a valid Certificate Authority (CA). By default, on a first-time start-up, it creates a self-signed certificate. This ...
                    • How to install SSL certificate in AssetExplorer

                      SSL Installation Do you have a Wildcard or a Multi-domain certificate already running in your other servers and want to reinstall in on AssetExplorer server ?, then click here to find how to export SSL certificate using MMC.  Do you already have a ...