[openssl-users] Subject CN and SANs

Salz, Rich rsalz at akamai.com
Sun Dec 23 02:12:33 UTC 2018

Putting the DNS name in the CN part of the subjectDN has been deprecated for a very long time (more than 10 years), although it is still supported by many existing browsers. New certificates should only use the subjectAltName extension.

More information about the openssl-users mailing list