Create Server Certificates with DNS Name

[KAB]

Is there a way to create server certificates with a DNS name.  In iManager it only allows me to add a nickname and select the server.

Our developers would like this if possible.

I have looked and am not finding how to do this.

Thank you!

[geoffc]

Do you mean the Subject name should be cn=server.acme.com ?

Or do you mean a Subject Alternate Name, which is usually what is required?

[KAB]

They want to use a DNS name which already exists.  Such as ldap.xxx.com.

[KAB]

I might add, we have this working in one environment with no special certificate.  ldap_xxx_xx_xx.com

They now have an app that will not support underscores.  I can't understand why it's not working for them when the underscore name is with no special cert other than the default server certs.

[geoffc]

Again, where do you want the DNS name? In which field?

Subject name?

Subject Alternate Name?

Both are valid, and used differently.

[KAB]

I'm not sure I know the differences between Subject Name and Subject Alternative Name.

I know there application points to the dns name which can't use the underscore.  This is why they created a new DNS name without underscores.  They are the ones who told me a new cert with the DNS name is needed.  I'm only now trying to figure out how to do this.

And it's odd the other environment can use the DNS name with underscores.  This is a great mystery so far!!

[mathiasbraun · Accepted solution]

On creation, in step 1, select "Custom" as "Creation Method". This will allow you to enter virtually anything as "subject" and "subjct alternative names".