Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 1534 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

X.509 Certificate Subject CN Is Not Valid

Andy Ho Boon Hua

HI,
      We did a security scanning and found a CN mismatch in the certificate. what is this Router$PAPP01:1071361 in the CN? Shouldnt the CN be the machine name PAPP01? How to resolve this?

Thank you.

172.22.8.3:8194 (PAPP01) * Subject CN Router$PAPP01:1071361 does not match target name specified in the site.



This thread was automatically locked due to age.
Parents
  • 0

    Hello Andy Ho Boon Hua,

    Shouldn't the CN be the machine name PAPP01?
    who says so? Your scanner incorrectly assumes that the end-entity is "the computer" and the CN has the be the computer's (NetBIOS) name. Use of TLS is not restricted to browser⇔webserver communications and the "web" (HTTP/S) semantics ("site") do not apply. Router$PAPP01:1071361 is the end-entity that has been certified by SEC's Certification Manager and this CN doesn't change when the computer is renamed.

    Christian 

Reply
  • 0

    Hello Andy Ho Boon Hua,

    Shouldn't the CN be the machine name PAPP01?
    who says so? Your scanner incorrectly assumes that the end-entity is "the computer" and the CN has the be the computer's (NetBIOS) name. Use of TLS is not restricted to browser⇔webserver communications and the "web" (HTTP/S) semantics ("site") do not apply. Router$PAPP01:1071361 is the end-entity that has been certified by SEC's Certification Manager and this CN doesn't change when the computer is renamed.

    Christian 

Children
No Data
Unfiltered HTML