[cabfpub] Encoding IP addresses in the SAN

Doug Beattie doug.beattie at globalsign.com
Wed Aug 12 10:46:56 UTC 2015

As a CA we "try" to follow the rules for encoding data in SANs, but apparently some browsers do not process IP addresses when they are encoded as iPAddress - they need the IP address to be in the dNSName field.  This means we need to put the same IP address in the certificate twice as a work around

Have other CAs found this to be true?

Will the browsers (at least MS and Google) eventually update their logic to process SAN types of iPAddress?

Maybe these references are out of date and all new versions support IP address correctly now, I'm not sure:

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20150812/50cb582c/attachment-0002.html>

More information about the Public mailing list