> On Dec 23, 2018, at 4:29 PM, Kyle Hamilton <aerowolf@xxxxxxxxx> wrote: > > SubjectCN is an operational requirement of X.509, I believe. You're confusing the DN and the CN. > It's not optional in the data structure, at any rate. The subjectDN is not optional, but it can be empty sequence, and is empty for domains whose name exceeds the CN length limit of either 63 or 64 characters (can't recall which of the two just now, but that is not important). -- Viktor. -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
