> Wow a 512 bit key! Really unwise.
Ture.
> You did not mention the
>
> X509v3 Subject Alternative Name:
> DNS:helpdesk.cis.uab.edu
>
> When this is present the CN is ignored.
Really? That seems like a bug. There's a reason why it's called
subjectAlternativeName, and not subjectPreferredName. Nevertheless, as you
say, putting both names is a reasonable work-around.
/r$
--
SOA Appliances
Application Integration Middleware
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]