[cabfpub] Is CN value required in the SAN?

Doug Beattie doug.beattie at globalsign.com
Wed May 10 12:45:38 UTC 2017

Thanks, I knew it had to be there somewhere.

From: Public [mailto:public-bounces at cabforum.org] On Behalf Of Adriano Santoni via Public
Sent: Wednesday, May 10, 2017 8:43 AM
To: public at cabforum.org
Cc: Adriano Santoni <adriano.santoni at staff.aruba.it>
Subject: Re: [cabfpub] Is CN value required in the SAN?

Excerpt from the BRs: Subject Distinguished Name Fields
a. Certificate Field: subject:commonName (OID
Required/Optional: Deprecated (Discouraged, but not prohibited)
Contents: If present, this field MUST contain a single IP address or Fully‐Qualified Domain
Name that is one of the values contained in the Certificate’s subjectAltName extension (see

Il 10/05/2017 14:36, Doug Beattie via Public ha scritto:

In reading the BRs, I see the requirement that the SAN must contain at least one value (, but I can’t find a reference that the value in the CN needs to be in the SAN.  Am I missing that link somewhere, or can the value in the CN be omitted from the SAN?  With Chrome depreciating use of CN, CAs will certainly want to include the value in the SAN, but is there a BR requirement that the CN value must be in the SAN?


Public mailing list

Public at cabforum.org<mailto:Public at cabforum.org>



Cordiali saluti,

Adriano Santoni
(Aruba Group)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/public/attachments/20170510/719558a3/attachment-0003.html>

More information about the Public mailing list