This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

X.509 Certificate Subject CN Is Not Valid

HI,
We did a security scanning and found a CN mismatch in the certificate. what is this Router$PAPP01:1071361 in the CN? Shouldnt the CN be the machine name PAPP01? How to resolve this?

Thank you.

172.22.8.3:8194 (PAPP01) * Subject CN Router$PAPP01:1071361 does not match target name specified in the site.

This thread was automatically locked due to age.

0 Yashraj S over 4 years ago

Hi Andy Ho Boon Hua,

Can you please provide more information regarding the issue you're facing with Sophos Enterprise Console? It would be great if you can provide us a few screenshots so that we can assist you better.

Thanks,

Yashraj Singha
Manager | Global Community Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 QC over 4 years ago

Hello Andy Ho Boon Hua,

Shouldn't the CN be the machine name PAPP01?
who says so? Your scanner incorrectly assumes that the end-entity is "the computer" and the CN has the be the computer's (NetBIOS) name. Use of TLS is not restricted to browser⇔webserver communications and the "web" (HTTP/S) semantics ("site") do not apply. Router$PAPP01:1071361 is the end-entity that has been certified by SEC's Certification Manager and this CN doesn't change when the computer is renamed.

Christian
Cancel
Vote Up 0 Vote Down

Cancel