Forum Discussion

Dayesh_263997's avatar
Dayesh_263997
Icon for Nimbostratus rankNimbostratus
Dec 11, 2018

SAN (Subject Alternative Name) query - is it mandatory ?

Hello Team,

 

What is Subject alternative name in the certificate? Is it mandatory to fill the SAN details?

 

Regards,

 

Dayesh

 

1 Reply

  • RFC describe following behavior :

     

    • if both SAN and subject are defined, the only value that is checked to match server name matches is SAN
    • if only subject is defined, the server name must match subject.

    So SAN is not mandatory, ...

     

    But Google Chrome decided to change rules since 2017... google chrome obsoletes subject validation and requires SAN as the only valid server name field.