> Wow a 512 bit key! Really unwise. Ture.
> You did not mention the > > X509v3 Subject Alternative Name: > DNS:helpdesk.cis.uab.edu > > When this is present the CN is ignored. Really? That seems like a bug. There's a reason why it's called subjectAlternativeName, and not subjectPreferredName. Nevertheless, as you say, putting both names is a reasonable work-around. /r$ -- SOA Appliances Application Integration Middleware ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]