CN in SubjectAltName necessary ?

2012-10-24 Thread Thomas
Hey there, for openssl, is it necessary to include the CN in the subjectAltName field if the latter one is present at all ? I would expect the answer to be 'no' because I would expect the CN and subjectAltName field to be in a 'or' relation - so either one to match would be sufficient.

Re: CN in SubjectAltName necessary ?

2012-10-24 Thread Michael Sierchio
The semantics of subjectAltName depend on use. For example http://tools.ietf.org/html/rfc4945 On Tue, Oct 23, 2012 at 1:57 AM, Thomas alth...@gmx.net wrote: Hey there, for openssl, is it necessary to include the CN in the subjectAltName field if the latter one is present at all ? I would