X.509 Certificate Subject CN Is Not Valid

HI,
      We did a security scanning and found a CN mismatch in the certificate. what is this Router$PAPP01:1071361 in the CN? Shouldnt the CN be the machine name PAPP01? How to resolve this?

Thank you.

172.22.8.3:8194 (PAPP01) * Subject CN Router$PAPP01:1071361 does not match target name specified in the site.

Parents
  • Hello Andy Ho Boon Hua,

    Shouldn't the CN be the machine name PAPP01?
    who says so? Your scanner incorrectly assumes that the end-entity is "the computer" and the CN has the be the computer's (NetBIOS) name. Use of TLS is not restricted to browser⇔webserver communications and the "web" (HTTP/S) semantics ("site") do not apply. Router$PAPP01:1071361 is the end-entity that has been certified by SEC's Certification Manager and this CN doesn't change when the computer is renamed.

    Christian 

Reply
  • Hello Andy Ho Boon Hua,

    Shouldn't the CN be the machine name PAPP01?
    who says so? Your scanner incorrectly assumes that the end-entity is "the computer" and the CN has the be the computer's (NetBIOS) name. Use of TLS is not restricted to browser⇔webserver communications and the "web" (HTTP/S) semantics ("site") do not apply. Router$PAPP01:1071361 is the end-entity that has been certified by SEC's Certification Manager and this CN doesn't change when the computer is renamed.

    Christian 

Children
No Data