Certificates and OpenSSL
Objective This article describes how to create a Certificate Signing Request (CSR) and key file for a Subject Alternative Name (SAN) certificate with multiple subject alternate names. Instructions To create a Certificate Signing Request (CSR) and key file for a Subject Alternative Name (SAN) certificate with multiple subject alternate names, complete the following procedure: Create … Read more
To change the validity period settings for a CA, follow these steps. Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry … Read more
Requirements for trusted certificates in iOS 13 and macOS 10.15 Learn about new security requirements for TLS server certificates in iOS 13 and macOS 10.15. All TLS server certificates must comply with these new security requirements in iOS 13 and macOS 10.15: TLS server certificates and issuing CAs using RSA keys must use key sizes … Read more
have you noticed that Certs you create on your Standalone or intermediate CA have a 1 year lifespan even if your CA has a 10 or 20 etc. year cert? Here is how to create certs with longer validity! Do this from the CA at the command prompt. certutil -setreg CA\ValidityPeriod “Years” certutil -setreg CA\ValditiyPeriodUnits … Read more
Original here – Reduce SSL cost and maintenance by using single certificate for multiple websites using SAN certificate SAN stands for “Subject Alternative Names” and this helps you to have a single certificate for multiple CN (Common Name). You might be thinking this is wildcard SSL but let me tell you – it’s slightly different. In … Read more
Copy the default template of openssl.cnf to a writable location. cp /System/Library/OpenSSL/openssl.cnf src Uncomment the req_extensions = v3_req req_extensions = v3_req # The extensions to add to a certificate request Add subjectAltName to v3_req section [ v3_req ] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names Add the … Read more