How do I set up the DN for a SSL cert with a hostname of greater than 64 characters?

Question

Everywhere I read says to have the server hostname in the commonName field and the subjectAltName field. The problem is that the hostname that I want to sign has greater than 64 characters. Therefore, the hostname wont fix in that field. I have seen sites such as this which even say that it is a security vulnerability not to have the hostname as the commonName. How should I do this?

score 0 · Answer 1 · edited Oct 07 '21 at 08:14

0

Check this RFC:

RFC5280

This previous questions at stackoverflow:

As for a workaround, you can set a short CNAME entry in your DNS.

edited Oct 07 '21 at 08:14

Community

1

answered Apr 13 '13 at 19:51

dawud

15,096
3
42
61

That wont work: the reason being that the hostname is a sha2 hash, I cant shorten it without losing meaning. – chacham15 Apr 14 '13 at 08:42

score 0 · Accepted Answer · answered Apr 21 '13 at 15:56

0

THe answer is that the cname is only an alternate. The cname and the san dont have to match.

answered Apr 21 '13 at 15:56

chacham15

103
3

How do I set up the DN for a SSL cert with a hostname of greater than 64 characters?

2 Answers2