> Wow a 512 bit key! Really unwise.

Ture.

> You did not mention the
> 
>             X509v3 Subject Alternative Name:
>       DNS:helpdesk.cis.uab.edu
> 
> When this is present the CN is ignored.


Really?  That seems like a bug.  There's a reason why it's called 
subjectAlternativeName, and not subjectPreferredName. Nevertheless, as you 
say, putting both names is a reasonable work-around.

        /r$

--
SOA Appliances
Application Integration Middleware


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to