More
SSL Certificates without localhosts and IP addresses

SSL Certificates without localhosts and IP addresses

20-04-2015 13:09:42
Due to introducing by CA/Browser Forum (CA/B) its guidelines, issuing of SSL certificates for IP addresses and server internal names won’t be allowed if its validity period exceed November 1st, 2015.
 
Guidelines indicates also the October 1st, 2015 as the deadline for revocation of all certificates containing an IP address or internal name as the SAN (Subject Alternative Name) or CN (Common Name) .
 
What does it mean?
If you are running a server that is using a local names or IP address, you should change it to a public domain (based on gTLD or ccTLD) or change your certificate to one that meets the above date.  All internal connections that require a public certificate must be made using names that are verifiable.
Therefore, we recommend changing the currently used names, eg. use of subdomain in previously registered name, eg. Serwer01.intranet.yourdomain.com.
 
Check if above changes affect your certificate: 
 
If the values of "Website" or "Alternative names (SANs)" fields is inconsistent with the CA / Browser guidelines, a certificate will soon be unrecognized.
 
Certyfikaty SSL bez localhost’ów i adresów IP
 
 
Examples of affected names:
- Server01
- exch01.certyfikatyssl.local
- srv01.domena.lan
- localhost
- 213.76.36.100
- 10.0.0.10
If your certificate contains similar names, you must take necessary steps.
 
CA/B Forum Information: https://cabforum.org/internal-names/
 

Recent Posts

Comodo is now Sectigo
09-11-2018 12:54:30

According to previous announcements, a year after the acquisition of Comodo Group by Francisco Partners, on November 1 Comodo CA announced that from now on it is changing its brand to Sectigo [pronounced. sec-tee-go]. The goal of rebranding is consistency in company communication and better dedication to what Comodo is doing now.

Comodo is now Sectigo
European Cyber Security Month 2018
27-09-2018 10:46:21

The European Union Agency for Network and Information Security (ENISA), which is the center of knowledge about cyber security in Europe, organizes as every year in October the European Cyber Security Month. The campaign is starting in a few days. What is its purpose and how can you participate in it?

European Cyber Security Month 2018
GDPR and SSL certificate. Is encryption necessary for compliance with the GDPR?
18-05-2018 15:47:40

General Data Protection Regulation (GDPR) is a 99-article regulation meant to protect the private data of Europeans in IT systems. Announced in 2016, covers a broad variety of topics and will go into effect as a requirement on May 25, 2018. GDPR applies to any company doing business in Europe even if it is located elsewhere.

GDPR and SSL certificate. Is encryption necessary for compliance with the GDPR?
more posts