> I also find this in Sun documentation: > > certutil -R ...-CUT-... -a -8 amserv1.example.com,amserv2.example.com > Ok, after reading document I see that certutil that cames with FDS support subjectAltName...so I tried to make server certificate with this extension but unfortunately doesn't work; I used the following # ../shared/bin/certutil -R -d . -s 'CN=nodo1.domain.example.com -o tmpcertreq -g 1024 -8 ldap.domain.example.com # ../shared/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o tmpcert.der -m 3 -v 120 -1 -5 -8 ldap.domain.example.com # ../shared/bin/certutil -A -d . -n "nodo1.domain.example.com" -t u,u,u -i tmpcert.der ...I supposed that it was correctly but I'm not sure...I don't find anything about configuration certificate with subjectAltName extention. Could someone suggest me the right way? THANKS Alex
